Client Certificate

https://amod-kadam.medium.com/how-to-set-up-private-ca-and-use-the-certificates-issued-by-private-ca-da55941c51ee

Step1: Generate private key for CA

openssl genrsa -des3 -out CA.key 2048

openssl genrsa -des3 -out ca.key 4096

openssl genrsa -aes256 -out ca.key 2048

openssl genrsa -aes256 -out lab.key 2048

Generating RSA private key, 2048 bit long modulus (2 primes)

.......................................+++++

..........................................+++++

e is 65537 (0x010001)

Enter pass phrase for lab.key:

Verifying - Enter pass phrase for lab.key: aruba123

cisco123

.........................................

Step2: Generate CA certificate

openssl req -x509 -new -nodes -key CA.key -sha256 -days 1825 -out CA.pem

openssl req -new -x509 -days 3650 -key ca.key -out ca.crt

openssl req -x509 -new -nodes -key ca.key -sha256 -days 1825 -out ca.pem

.........................................

openssl req -new -key client1.key -out client1.csr -config client.conf.

openssl genrsa -aes256 -out client1.key 2048

openssl genrsa -aes256 -out client2.key 2048

(openssl req -new -key ca.key -out client1.csr)

openssl req -new -key client1.key -out client1.csr

openssl req -new -key client2.key -out client2.csr

.........................................

openssl req -in client1.csr -noout -text

.........................................

openssl x509 -req -in client1.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -out client1.crt -days 500 -sha256 -extfile client.conf -extensions req_ext.

openssl x509 -req -days 3650 -in acme.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out acme.crt -sha256 

openssl x509 -req -in client1.csr -CA ca.pem -days 3650 -CAkey ca.key -set_serial 01 -out client1.pem

openssl x509 -req -in client2.csr -CA ca.pem -days 3650 -CAkey ca.key -set_serial 02 -out client2.pem

.........................................

openssl x509 -in client1.pem -text -noout

.........................................

https://stackoverflow.com/questions/808669/convert-a-cert-pem-certificate-to-a-pfx-certificate

openssl pkcs12 -inkey bob_key.pem -in bob_cert.cert -export -out bob_pfx.pfx

openssl pkcs12 -inkey client1.key -in client1.pem -export -out client1_pfx.pfx

openssl pkcs12 -inkey client2.key -in client2.pem -export -out client2.pfx

.........................................

openssl pkcs12 -in example.pfx -info

.........................................

.........................................

Reference:

https://www.javaxt.com/wiki/Tutorials/Windows/How_to_Enable_LDAPS_in_Active_Directory

https://knowledge.digicert.com/general-information/openssl-quick-reference-guide

https://amod-kadam.medium.com/how-to-set-up-private-ca-and-use-the-certificates-issued-by-private-ca-da55941c51ee

https://mcilis.medium.com/how-to-create-a-client-certificate-with-configuration-using-openssl-89214dca58ec

https://docs.microfocus.com/SM/9.60/Hybrid/Content/security/concepts/example_generating_a_client_certificate_with_openssl.htm

https://techdocs.akamai.com/iot-edge-connect-msg-store/docs/create-client-certificate

https://techdocs.akamai.com/iot-edge-connect-msg-store/docs/create-root-certificate

PFX file

https://superuser.com/questions/1352171/certificate-validation-failure-while-using-cisco-anyconnect-with-pfx-certificate

https://stackoverflow.com/questions/808669/convert-a-cert-pem-certificate-to-a-pfx-certificate

.........................................

<?xml version="1.0" encoding="UTF-8"?><CISCO_WT_ARTIFACTS version="1.0"><CISCO_WT_LICENSE version="1.0"><FEATURE_NAME>isrv_ax_2500M</FEATURE_NAME><FEATURE_VERSION>1.0</FEATURE_VERSION><UDI><PID>CSR1000V</PID><SN>9TH7THPKTT1</SN></UDI><SOURCE>Cisco HQ</SOURCE><CREATE_DATE>2024-08-07T21:15:32</CREATE_DATE><LICENSE_LINE_HASH hashAlgo="SHA1">JBvrqjBdFJT20G0r1k+HIKCCc2w=</LICENSE_LINE_HASH><TYPE>PERMANENT</TYPE><EXPIRATION><END_DATE>2024-10-06T00:00:00</END_DATE></EXPIRATION><EULA>YES</EULA><LICENSE_LINE><![CDATA[12 isrv_ax_2500M 1.0 LONG NORMAL STANDALONE EXCL INFINITE_KEYS INFINITE_KEYS NEVER 6 OCT 2024 0 NiL SLM_CODE CL_ND_LCK NiL *16TCG9NNFN3G7NB400 NiL NiL NiL 5_MINS <UDI><PID>CSR1000V</PID><SN>9TH7THPKTT1</SN></UDI><T></T> g1vN31TW:J1oxPN,my80fXjZhLpsIKAemgCQWu7QO:3CTbzuOlwc3o:Ek:JBvVmjLP2x8eaaDknlXLsCY9sTB13nG4DG1,Bwtnvt4JJVuTD:VdVmhrGPnS8eIAuqwaYtOXVf$<WLC>AQEBISAB//+MlxSL+JEtsz69sAok+UgcaAQrPyL4yPhKhHwtX5bmbzFZXBZo8M5Y0j9gHdCXtUfuqTEyF3Qjv6OgUxqCBLxC39awh+4AFpeUpMd2eIwjYyY4xDkAF4R5JxWFrounhiN89CsmPogG23Og4EJ0yZfQDhXzY00o7+ZWZVe61YQ1M11MRJGkwS1ELz8crBZnBZo=</WLC>]]></LICENSE_LINE><USER_MODIFIABLE_COMMENT fieldRestrictions="Max 99 ASCII characters in length."></USER_MODIFIABLE_COMMENT></CISCO_WT_LICENSE>

</CISCO_WT_ARTIFACTS>

.........................................