FreeKB - Create a self signed certificate and private key in an IBM Key Database file
Create a self signed certificate and private key in an IBM Key Database file

Home > Search


This assumes you have reviewed IBM GSKit (Global Security Kit) - Getting Started (command line) or IBM iKeyman - Getting Started (GUI) and that you have created a key database.

 


GSKit (command line)

The -create option can be used to create a self-signed certificate in a key database. In this example, the name of the certificate will be "default". After the self signed certificate has been created, you can then use the -list option to list the certificates in the key database and use the -details option to view the details of the self signed certificate.

ihs_home/gsk8/bin/gsk8capicmd_64 \
-cert \
-create \
-db /path/to/example.kdb \
-stashed or -pw your_password \
-label "default" \
-dn "cn=your_hostname,o=your_domain" \
-size 2048 \
-sigalg SHA512WithRSA \
-expire 365 \
-default_cert yes

 

Did you notice that this command creates the private key, certificate signing request, and the public certificate? For example, 2048 is the size of the private key and 365 is when the public certificate expires.

 


iKeyman (GUI)

Select New Self-Signed. Complete the form and the self-signed certificate will be created. In this example, a self-signed certificate named "default" was created.



Add a Comment




We will never share your name or email with anyone. Enter your email if you would like to be notified when we respond to your comment.




Please enter in the box below so that we can be sure you are a human.




Comments