Question:
How to generate CA certificate and sign certificate signing request (CSR)
Answer:
1. CA key and CA certificate:
openssl genrsa -out ca.key 8192openssl req -new -x509 -extensions v3_ca -key ca.key -out ca.crt -days 365
2. Generate node CSR certificate :
openssl genrsa -out `hostname -f`.key 2048openssl req -new -sha256 -key `hostname -f`.key -out `hostname -f`.csr
3.
openssl x509 -req -CA ca.crt -CAkey ca.key -in `hostname -f`.csr -out `hostname -f`.crt -days 365 -CAcreateserial
