OpenSSL

- To create a certifcation authority

openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650 -config openssl.cnf

- To create a CSR:

openssl req -config openssl.cnf -new -keyout peppe.key -out peppe.csr

- To sign the csr with the CA we created:

openssl ca  -config openssl.cnf -policy policy_anything -out newcert.pem -infiles newreq.pem               

 

- To obtain a pkcs12 certificate:

openssl pkcs12 -export -nodes -inkey chiave.pem -in certificate.pem -out

certificate.p12