In this hands-on lab, you’ll be getting more familiar and experienced in using OpenSSL to create your own Certificate Authority (CA), so that you can sign your own certificate requests. You’ll set up the Root Certificate Authority, generate a Certificate Signing Request (CSR), and then use that request to generate the end result — a server certificate. You’ll then use the `gpg` command to generate and query your own GPG public and secret keys, and use that information to encrypt a data file and then decrypt it, comparing the file contents before and after.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Set Up a Certificate Authority
- Install the
treecommand - Set up a Certificate Authority (CA) directory structure
- Create a Root Certificate
- Verify the certificate details
- Install the
- Create a Certificate Signing Request
- Generate a Certificate Signing Request (CSR)
- Supply the necessary details
- Verify the certificate details
- Note file locations and contents
- Generate a Server Certificate
- Set up the certificate database
- Generate a server certificate
- Verify the certificate details
- Inspect the contents of the database
- GPG Encrypt and Decrypt a Data File
- Configure a test directory
- Generate a GPG public/secret key pair
- Confirm the GPG keys were generated
- Locate the GPG files
- Encrypt and decrypt a data file
- Verify that the operation worked properly
