blob: 1360ce9ea7cd84049ab229ae996b5f84b3df3411 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
|
How to sign CSAR file - option 2
---------------------
openssl req -new -nodes -x509 -keyout root-private-key.pem > root.cert
openssl req -new -nodes -keyout sample-pnf-private-key.pem > sample-pnf-request.pem
openssl x509 -req -CA root.cert -CAkey root-private-key.pem -CAcreateserial < sample-pnf-request.pem > sample-pnf.cert
openssl cms -sign -binary -nocerts -outform pem -signer sample-pnf.cert -inkey sample-pnf-private-key.pem < sample-pnf.csar > sample-pnf.cms
How to sign CSAR file - option 1
--------------------------------
openssl req -new -nodes -x509 -keyout root-private-key.pem > root-certificate.cert
TIP: As a 'Organizational Unit Name' set, for example: Certificate Authority
openssl req -new -nodes -keyout signing-private-key.pem > signing-request.pem
TIP: As a 'Organizational Unit Name' set, for example: Nokia. Name values must be different!
openssl x509 -req -CA root-certificate.cert -CAkey root-private-key.pem -CAcreateserial < signing-request.pem > signing-certificate.cert
openssl cms -sign -signer signing-certificate.cert -inkey signing-private-key.pem -outform pem -binary < MainServiceTemplate.mf > signature-and-certificate.cms
openssl cms -verify -content MainServiceTemplate.mf -CAfile root-certificate.cert -inform pem -binary < signature-and-certificate.cms > /dev/null
|
