Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
en:services:it_security:pki:start [2024/03/01 17:16] – [Detailed description of the possible uses of X.509 certificates] Order changed thinder | en:services:it_security:pki:start [2024/03/15 13:22] (current) – [... from the GÉANT TCS PKI] thinder | ||
---|---|---|---|
Line 15: | Line 15: | ||
==== ... from the GÉANT TCS PKI ==== | ==== ... from the GÉANT TCS PKI ==== | ||
- | To apply for an e-mail certificate from the GÉANT TCS CA, which is anchored in the client of the DFN of the GÉANT TCS PKI, please click on the PDF instructions below. | + | To apply for an e-mail certificate from the GÉANT TCS PKI, which is anchored in the client of the DFN of the GÉANT TCS PKI, please click on the PDF instructions below. |
<WRAP center round download 80%> | <WRAP center round download 80%> | ||
Due to frequent changes in the application and issuance process of the GÉANT TCS PKI operator Sectigo, these have been created as a PDF file for easier modification and adaptation. | Due to frequent changes in the application and issuance process of the GÉANT TCS PKI operator Sectigo, these have been created as a PDF file for easier modification and adaptation. | ||
Line 41: | Line 41: | ||
</ | </ | ||
- | ===== Apply for server | + | ===== Apply for server |
- | Call OpenSSL with the following | + | ==== ... from the GÉANT TCS PKI ==== |
+ | To request ACME External Account Binding Information for server certificates from the GÉANT TCS PKI, which is anchored in the client of the DFN of the GÉANT TCS PKI, send an e-mail to [[support@gwdg.de? | ||
+ | |||
+ | <WRAP center round download 80%> | ||
+ | Once you have received the ACME External Account Binding information, | ||
+ | - [[https:// | ||
+ | </ | ||
+ | <WRAP center round important 60%> | ||
+ | (currently only in German) | ||
+ | </ | ||
==== Unix/OS X ==== | ==== Unix/OS X ==== | ||
+ | <WRAP center round info 80%> | ||
+ | Call OpenSSL with the following Parameters | ||
+ | |||
+ | </ | ||
+ | |||
Simple Bash script... | Simple Bash script... | ||
<code bash createcsr.sh> | <code bash createcsr.sh> | ||
Line 61: | Line 75: | ||
===== Apply for server certificate with OpenSSL.cnf ===== | ===== Apply for server certificate with OpenSSL.cnf ===== | ||
+ | <WRAP center round info 80%> | ||
Call OpenSSL with the following Parameters | Call OpenSSL with the following Parameters | ||
+ | |||
+ | </ | ||
==== Unix/OS X ==== | ==== Unix/OS X ==== | ||
Line 266: | Line 283: | ||
- [[https:// | - [[https:// | ||
- [[https:// | - [[https:// | ||
+ | |||
+ | <WRAP center round important 60%> | ||
+ | (currently only in German) | ||
</ | </ | ||
+ | |||
+ | </ | ||
+ |