How to generate a non-self-signed certificate
When generating a self-signed certificate, we used a generic approach instead of long combined commands. Therefore, the generation of non-self-signed certificates will be very similar. We will now generate a couple of non-self-signed certificates. We will use one as an intermediate CA certificate and another as an end-entity leaf certificate.
Let’s proceed with the certificate generation:
- First, let’s generate a key pair for the intermediate CA certificate:
$ openssl genpkey \ -algorithm ED448 \ -out intermediate_keypair.pem
- Next, generate a CSR:
$ openssl req \ -new \ -subj "/CN=Intermediate CA" \ -addext "basicConstraints=critical,CA:TRUE" \ -key intermediate_keypair.pem \ -out intermediate_csr.pem
Note that we used...