j-v-o

Common OpenSSL Commands with Keys and Certificates

openssl req -x509 -newkey rsa:4096 -sha256 -keyout example.key -out example.crt -subj "/CN=example.com" -days 3650 -passout pass:foobar

openssl x509 -x509toreq -in example.crt -out example.csr -signkey example.key -passin pass:foobar

For educational reasons I've decided to create my own CA. Here is what I learned.

Lets get some context first.

	pipeline {

	agent {
	label 'agentId' //The id of the slave/agent where the build should be executed, if it doesn't matter use "agent any" instead.
	}

	triggers {
	cron('H /8 * *') //regular builds
	pollSCM('* * * * *') //polling for changes, here once a minute
	}

	# Generate Private Key and Certificate using RSA 256 encryption (4096-bit key)
	openssl req -x509 -newkey rsa:4096 -keyout privatekey.pem -out certificate.pem -days 365
	# Alternatively, setting the "-newkey" parameter to "rsa:2048" will generate a 2048-bit key.

	# Generate PKCS#12 (P12) file for cert; combines both key and certificate together
	openssl pkcs12 -export -inkey privatekey.pem -in certificate.pem -out cert.pfx

	# Generate SHA256 Fingerprint for Certificate and export to a file
	openssl x509 -noout -fingerprint -sha256 -inform pem -in certificate.pem >> fingerprint.txt