Bernhard Fröhlich
Personal Email: ted AT convey.de
Email for Arbitration ot other CAcert related purposes: bernhard AT cacert.org
Also known as Ted...
Currently working for EducationCampus, Software/DevelopmentTeam, Software/Assessment/Team and Arbitration
Physically located in Munich.
My Way to create Client Certificates
Needs minimal openssl.minimal.cfg:
# Minimum configuration file for "openssl req", everything is set in command line options [ req ] distinguished_name = req_dummy [ req_dummy ]
Note that the value of the -subj argument is absolutely irrelevant. It's just that openssl wants to have something there!
mycert.csr includes thr CSR you have to upload to CAcert's webpage, while you have to store the created certificate in mycert.crt before calling "openssl pkcs12".
openssl req -newkey rsa:2048 -keyout mycert.key -out mycert.csr -subj "/emailAddress=dummy@example.com" -config openssl.minimal.cfg openssl pkcs12 -export -inkey mycert.key -in mycert.crt -out mycert.p12 -name "Education 2022"