CAs, certificates, digests, keys, etc. which are not generated by mkcert.py are stored here. Contains all of the keys needed by mkcert.py during certificate generation with the main and apple certs.
| Filename | Generation Command |
|---|---|
| ca_key.pem | openssl genrsa -out x509/static/ca_key.pem 2048 |
| ec_ca_key.pem | openssl ecparam -name prime256v1 -genkey -out x509/static/ec_ca_key.pem |
| ec_key.pem | openssl ecparam -name prime256v1 -genkey -out x509/static/ec_key.pem |
| ec_ocsp_ca_key.pem | openssl ecparam -name prime256v1 -genkey -out x509/static/ec_ocsp_ca_key.pem |
| ec_ocsp_key.pem | openssl ecparam -name prime256v1 -genkey -out x509/static/ec_ocsp_key.pem |
| intermediate_b_ca_key.pem | openssl genrsa -out x509/static/intermediate_b_ca_key.pem 2048 |
| intermediate_b_key.pem | openssl genrsa -out x509/static/intermediate_b_key.pem 2048 |
| intermediate_ca_key.pem | openssl genrsa -out x509/static/intermediate_ca_key.pem 2048 |
| intermediate_key.pem | openssl genrsa -out x509/static/intermediate_key.pem 2048 |
| intermediate_ocsp_ca_key.pem | openssl genrsa -out x509/static/intermediate_ocsp_ca_key.pem 2048 |
| intermediate_ocsp_key.pem | openssl genrsa -out x509/static/intermediate_ocsp_key.pem 2048 |
| key.pem | openssl genrsa -out x509/static/key.pem 2048 |
| macos_ca_key.pem | openssl genrsa -out x509/static/macos_ca_key.pem 2048 |
| macos_key.pem | openssl genrsa -out x509/static/macos_key.pem 2048 |
| ocsp_ca_key.pem | openssl genrsa -out x509/static/ocsp_ca_key.pem 2048 |
| ocsp_key.pem | openssl genrsa -out x509/static/ocsp_key.pem 2048 |
| ocsp_responder_key.pem | openssl genrsa -out x509/static/ocsp_responder_key.pem 2048 |
| pkcs1_encrypted_key.pem | openssl rsa -in x509/static/key.pem -passin pass:qwerty -out x509/static/pkcs1_encrypted_key.pem -aes256 -passout pass:qwerty |
| pkcs1_encrypted_trusted_key.pem | openssl rsa -in x509/static/trusted_key.pem -passin pass:qwerty -out x509/static/pkcs1_encrypted_trusted_key.pem -aes256 -passout pass:qwerty |
| pkcs8_encrypted_ec_key.pem | openssl pkcs8 -topk8 -nocrypt -in x509/static/ec_key.pem -out x509/static/pkcs8_encrypted_ec_key.pem |
| pkcs8_encrypted_ec_ocsp_ca_key.pem | openssl pkcs8 -topk8 -nocrypt -in x509/static/ec_ocsp_ca_key.pem -out x509/static/pkcs8_encrypted_ec_ocsp_ca_key.pem |
| pkcs8_encrypted_ec_ocsp_key.pem | openssl pkcs8 -topk8 -nocrypt -in x509/static/ec_ocsp_key.pem -out x509/static/pkcs8_encrypted_ec_ocsp_key.pem |
| pkcs8_encrypted_ec_ocsp_responder_key.pem | openssl pkcs8 -topk8 -nocrypt -in x509/static/ec_ocsp_key.pem -out x509/static/pkcs8_encrypted_ec_ocsp_responder_key.pem |
| rollover_ca_key.pem | openssl genrsa -out x509/static/rollover_ca_key.pem 2048 |
| rollover_key.pem | openssl genrsa -out x509/static/rollover_key.pem 2048 |
| trusted_ca_key.pem | openssl genrsa -out x509/static/trusted_ca_key.pem 2048 |
| trusted_key.pem | openssl genrsa -out x509/static/trusted_key.pem 2048 |