6.
Create a certificate from the CSR that you just created. For example, on system with an
OpenSSL CA:
a.
Using a secure method, such as the
scp
command for network transfer or physical media
(such as a USB drive or CDROM), transfer the tomcat.csr file to the system where the
OpenSSL CA was created.
b.
Create a certificate from the tomcat.csr file.
# openssl x509 -req -days 365 -in /tmp/tomcat.csr -CA cacert.pem -CAkey
private/cakey.pem -set_serial 01 -out /tmp/tomcat.crt
Signature ok
subject=/C=US/ST=CA/L=Fremont/O=3PAR/OU=ST/CN=10.112.10.196
Getting CA Private Key
Enter pass phrase for private/cakey.pem:
Signature ok
subject=/C=US/ST=CA/L=Fremont/O=3PAR/OU=ST/CN=10.112.10.196
Getting CA Private Key
Enter pass phrase for private/cakey.pem:
31
