Difference between revisions of "Creating an X509 certificate using OpenSSL"

Creating an X509 certificate using OpenSSL (view source)

88 bytes added , 20:22, 12 June 2017

no edit summary

1,346

edits

@@ Line 16: / Line 16: @@
 # Open the command line application using '''<Windows Key>+<R Key>''' on your keyboard and running the '''CMD''' command;
-# Go to the OpenSSL bin folder using either of these command lines
+# Go to the OpenSSL bin folder using either of these command lines;
 #:: '''CD C:\OpenSSL-Win32\bin\'''
 #:: '''CD C:\OpenSSL-Win64\bin\'''
-# Create a 1024 bit private key using the following command line
+# Create a 1024 bit private key using the following command line;
 #:: '''openssl genrsa -out ''<organisation name>''.pem 1024'''
-#:: ''Do not lose this private key as it will be required later on.''
 # Create the X509 certificate using the following command line;
 #:: '''openssl req -new -x509 -key ''<organisation name>''.pem -out ''<organisation name>''.cer -days 1825'''
@@ Line 29: / Line 28: @@
 #:: ''Do not lose this X509 Certificate as it will be required later on;''
-You now have a '''Private Key PEM''' file and a public '''X509 Certificate''' required to create the private application in Xero.
+You now have a '''Private Key PEM''' file and a public '''X509 Certificate''' required to create the private application in Xero. We recommend you backup both files.
+Also note that the X509 Certificate will only be valid for 1825 days (5 years) and will need to be replaced eventually.
 == Related Topics ==
 * [[Connecting ODBClink to Xero using a private certificate]]