Proxmox SSL-Zertifikate mit Windows-CA erneuern

Published by cubewerk on 

 cd /etc/ssl
 touch req.conf
req.conf mit ... befüllen:

[req]
 distinguished_name = req_distinguished_name
 req_extensions = v3_req
 prompt = no
 [req_distinguished_name]
 C = DE
 ST = BY
 L = Trostberg 
 O = Ihr Firmenname
 OU = Abteilung XY
 CN = server01
 [v3_req]
 keyUsage = keyEncipherment, dataEncipherment
 extendedKeyUsage = serverAuth
 subjectAltName = @alt_names
 [alt_names]
 DNS.1 = server01
 DNS.2 = server03
 DNS.3 = server06
 DNS.4 = server01.bla.org
 DNS.5 = server03.bla.org
 DNS.6 = server06.bla.org
openssl genrsa -out server.key 2048
openssl req -new -out anfrage.csr -key server.key -config req.conf

Hinten raus fällt eineanfrage.csr. Mit Windows CA per RDP verbinden.

certreq -submit -attrib "CertificateTemplate:WebServer" deine.csr dein.crt
Categories: Blog