:::info For Internal Use Only–Not for Pubic Distribution. ::: > [name=Anthony Ho, MUS Applications Engineer] ###### tags: `OpenSSL` `Application` # OpenSSL This document will demonstrate how to import a certifcate generated with OpenSSL onto a NPort 6000 Series. Download and install `Win64 OpenSSL v1.1.1c` from [OpenSSL](https://slproweb.com/products/Win32OpenSSL.html). ```shell $ cd 'C:\Program Files\OpenSSL-Win64\bin\' ``` In the bin directory, perform the following commands: ### Generate CA (Root Certificate) ```shell $ mkdir root $ ./openssl req -x509 -newkey rsa:4096 -keyout root/root.pem -out root/root.crt -days 3650 -nodes ```  ### Generate Server Certificate (NPort 6000 Series) ```shell $ mkdir server1 $ ./openssl.exe req -newkey rsa:4096 -keyout server1/server1.pem -out server1/server1.csr -days 3650 -nodes ``` :::warning Common Name is the device's IP address. :::  ### Create an x509 v3 User Certificate ```typescript= authorityKeyIdentifier=keyid,issuer basicConstraints=CA:FALSE keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment subjectAltName = @alt_names [alt_names] IP.1 = 192.168.115.84 ``` :::warning Change IP.1 to your device's IP address and save the file as "v3.ext" to the bin directory. ::: ### Sign Certificate ```shell $ ./openssl.exe x509 -req -in server1/server1.csr -CA root/root.crt -CAkey root/root.pem -CAcreateserial -out server1/server1.crt -days 3650 -extfile v3.ext ```  ### Create the PEM file Merge the contents of ```server1.crt``` and ```server1.pem``` into a new file (I named it```nport.pem```) and save it into ```/bin/server1/```. ```shell $ cat .\server1\server1.crt, .\server1\server1.pem | sc .\server1\nport.pem ``` #### nport.pem ```typescript -----BEGIN CERTIFICATE----- MIIFkzCCA3ugAwIBAgIUdT9K6snuUl+UnNF1wFeMk8gswUMwDQYJKoZIhvcNAQEL BQAwWDELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMQ0wCwYDVQQHDARCcmVhMRYw FAYDVQQKDA1NVVMuYW50aG9ueWhvMRUwEwYDVQQDDAxhbnRob255aG8uaW8wHhcN MTkwNzE1MjAyNTIzWhcNMjkwNzEyMjAyNTIzWjBhMQswCQYDVQQGEwJVUzELMAkG A1UECAwCQ0ExDTALBgNVBAcMBEJyZWExHTAbBgNVBAoMFE1VUy5hcHBsaWNhdGlv bi10ZXN0MRcwFQYDVQQDDA4xOTIuMTY4LjExNS44NDCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBAMZej/su92Ci4cLar+CIoaY3RTxZjJti5AQpv08F3V9c sd/b2gXs7HuxpquiL8W7qf2TIDIENDLb8A9lYm4/C64PUEcpWmKQ+TVugR0bZvAL bJ0g82VV5/nlzH2pHo0m14hwgc0a1PZu5+82mkzuwDW7mzncDyWEdiurRcTaPbLa /dzbrUjXtOGthpbvjCcG+2hsBm5tt7yPcIqwJfRdV7/58g0HyM71xmvapbJgb8P1 EYM3peIYHYY6n90WKN64+MbCavscUad4oKaQmRWWPXJvGdJ5XPgEXERnjj0HDI2K is9oWdOVeQiP9RAU2MEOva3KvdYOo7bCHJE+iic6pVxIUFSFiuqinpU/r72J5xQ9 NaFrh84+C818/JZiqQzoWRfJLsJxC5oWzO2T/M0fQ14pnMUEn7StCS5IkS4ZnHUB VGTKIeJR6njzt8PGibLXnFqQTmhc9/VDr3VIX82/910WjTJ0X1DnNRLl46EP4W/3 jxoXSfVsP09oCbeoxwr9bIiLSWCvy/1THGh4diV0EyyxcbVgzf0EdKVYiJ9zl4P0 UGeObkFJnCurLUATkDBV0Q1JOPaMX7CUssWma0s3HHzh8/oZ3qVjCp5ATooxIP9j BipflZRi5WnYVnbE/dkzieLWLQyrB15qJdrtEJE3kCXTs7JvznH59+ZkKw4Zl65N AgMBAAGjTDBKMB8GA1UdIwQYMBaAFOBn0I1j7vrRmOhgjxKwD7FMbJa9MAkGA1Ud EwQCMAAwCwYDVR0PBAQDAgTwMA8GA1UdEQQIMAaHBMCoc1QwDQYJKoZIhvcNAQEL BQADggIBANMRZmMvmn6/bgS4C5vunnM/Vqy1n5pp/MjexKKycGEP4VJFL7Z9tTJw dbjaae+6Y3D4tnt0omVhkSkLFnO8+3Ud9s8KEmptmFHVecuh52uujy5GXK1k7zIz iHtBRA9gTt7+4hnBQaNU53Lh1NKjsBZdnmvZyZVqHcLkA+pnWQpi/Scm38jMtHxz zyPuHbMt3Y/B9o2vKfFv3TYtONM/MjDTYTCwA84ZszwecK+Gz2Zpysjb97MjrFSg xQLdpRfadKquPyIGIvGyKWd5zVdsXL/pUR8TFlpXGgGgaE9PhZx+xOwJSrCBx0r4 A44kx3cLer/3b3ONZe53mG/ubiEehTncpSY61TYlwS8a+pl7gLNWR29KNlrFpqUe PlTQKfIBadO8i6pSyAPd7CNG3yZPNKNxMF1kRx137v8diksVMhz6m3eNYHZIroHX 9jGQvE4Jc4O3fzxWlJa4MxCYLiB3KGmWpV0dwEfIkVE1hUWZzX1tNUZJBNVwIC9/ c8XBvtN7Bme1zhmubm1CA1Q8eCR7jZpG7umdVlpeWRIgNNozeIKnlB75Rf9xR3B+ 6sBYpCJrvDSsCvJAaXLPIbFgT5xLzq9fz600oYI2MSYJSC4WVp8f9kPuqRcORLTK eio+4vddh3TbMdUqYxI2a4z7NGZPvcMBBFXDf/TEXsvM7xBvoBmd -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- MIIJQQIBADANBgkqhkiG9w0BAQEFAASCCSswggknAgEAAoICAQDGXo/7LvdgouHC 2q/giKGmN0U8WYybYuQEKb9PBd1fXLHf29oF7Ox7saaroi/Fu6n9kyAyBDQy2/AP ZWJuPwuuD1BHKVpikPk1boEdG2bwC2ydIPNlVef55cx9qR6NJteIcIHNGtT2bufv NppM7sA1u5s53A8lhHYrq0XE2j2y2v3c261I17ThrYaW74wnBvtobAZubbe8j3CK sCX0XVe/+fINB8jO9cZr2qWyYG/D9RGDN6XiGB2GOp/dFijeuPjGwmr7HFGneKCm kJkVlj1ybxnSeVz4BFxEZ449BwyNiorPaFnTlXkIj/UQFNjBDr2tyr3WDqO2whyR PoonOqVcSFBUhYrqop6VP6+9iecUPTWha4fOPgvNfPyWYqkM6FkXyS7CcQuaFszt k/zNH0NeKZzFBJ+0rQkuSJEuGZx1AVRkyiHiUep487fDxomy15xakE5oXPf1Q691 SF/Nv/ddFo0ydF9Q5zUS5eOhD+Fv948aF0n1bD9PaAm3qMcK/WyIi0lgr8v9Uxxo eHYldBMssXG1YM39BHSlWIifc5eD9FBnjm5BSZwrqy1AE5AwVdENSTj2jF+wlLLF pmtLNxx84fP6Gd6lYwqeQE6KMSD/YwYqX5WUYuVp2FZ2xP3ZM4ni1i0MqwdeaiXa 7RCRN5Al07Oyb85x+ffmZCsOGZeuTQIDAQABAoICAGIX8OstVncbFLjem4pVBlrD iiFFxxov1MGaQ1g4djfqBqvEdBPqDSc9ukW1dho5qt4SGyGgoo9j41o5sGsEEiqI uBH4iRGkzxd1BbP3EPgzLgqleLbrvEL/OBgLwWfbhUmbGRTr59PVFCxeu/6/MZ1g oGoEQBk1X5pIn7+wjEIduNu2ZgJXaMMQpDWPT6cc9MW2ZZfF+c3swKJUaPBmGDZ+ ywtWhh6RuwUqojWLKrmkPny8z/L2KeNuqg8SHjPFFIB1M6HpZxeBty+m4YyjNs+X 0RUbnrWmslnBO71B9xsnH21hFMpkZ+2sAmtpY6ZUO8ftMeLgamS9qJLKclbj0VDp Pv7f7GYZfeyDT2gmxizRT4U3bGTeR787CLlZsbu+JR9j2U37rCjtVybgrNtsQFLr pIMMMEF0gMpo1enzwa8ORIiNnMhzTutJcDGsBnt8GYxzfBvHmD69fShkhMR7x0nK KOt7jJN3RIV1OpB3ApAw9w/eFAWxGUOnny0Q2jIFPi0odQuwnWepirk2CIyebx6a QWAkz6uLPCMWompt/B1KS93pW0hIi3lF1U0Q9ZBtlT1e2bOxOAhVqw2OMxkiKBnB 10cVJo6o+cbLi39rloMr0duAhuaSN+vmKwfXrfgwIM4RtYTNxyFctZ+Oou9cJqzg O5mYRRpF6IquXVPU7kIBAoIBAQD3HtdVk0dF7eOScTduj5U4ynmc7+R0lahy0l2X GLhp+NfnTXHY8dfh3VMIwS0CwtjosTYdnEZKEFFn6W9x8T459xy+E4XM+Kch9Byv Iei/6wkJ6xXZGajHGSeDYhfHX1QSAbLr4EJZZkyuI8sVMjmJlIKkj+Nz2/JW0sx6 zaP6+5Goljl5xSZLDZc8cATi57fY3XvW0onb13C/CPgAJeGmwV/PsdSlP+slqN/z 9odaD6YiQ4z+GGLFvOXnP7giSh1taHKyaY+PRE/HXcF3lNmLNJ06TW4tnVsIeTNi 2hoKgrZ8ptGRgiaXcTBB3JS9U6+LtK1rZ+sum4WfvG4cYelRAoIBAQDNf0e7ylfs vcqAmR36HWRqofThecyBw0Lom+/ZkY0NsZmcTDmdhLXPEO/bhfkEVQylyF6NoW98 jE26zKDQZn/lGbxvGkHZwZ0MokL1V63C2J72HGyVyKLkIboiaiTvlytye0aff6Il OKaLKmZNceuklansaIUR3Rnyq1lDh4DscrcBxiRSlPYxz3mT+fkUJFbBMoHpJ35S MsyvsxX5fY1FlkvDl7IP81XOxUDK9lrp49ILacvMv4zk/Q19UQ3TiEc8i/bH2Obw 1y5kEX7LcqCMQv2MphAk/UAuiaxDsoDtzqDsXAdhd7OG8Z2NzEzeKW604ErxU3wn aaTmPbH7TDY9AoIBAHk1jmcx+waIvVOp5od7M7UMUwQwAj1Q3rObDT68aE/KN5QD P3EqhjoJxd2Iatxs19mieimh6jQPtu4h6IDZ1Cy4UUfF6Z305H1Z7+vS1Qe1b9SG k0vOMyOc6e2eYo1u65x9atYZRFH3RGsxsT2vSdt6lW3ECctdOYtuj884KFNFq1cm gACDO9oaS3DgfPUStPFRCZn/4JCNJob9Di98ZSbWuHj1/5giNuNc5qQR6qe4/0LV IUXMjj3w/k8jyNxAwBhW39M0xa5+0ia2jNtrjhyibPAY5I7JHMqWMCcvVRCMtpeD d01IqkcjxIi5edc3QeZjc6A383oD3FHSKawQNlECggEAFO1LTtJyVceWIbZ2GQx5 N2q612Nh8i0CWVHYAR4TcTuO2x3gGCx1n1qoMoDYNRq8KP3Ysy+nfNWE7Or9zXtC twAB8oaIAjb3WVwE2ZtONLN+rK2EWVSPUhAlNm/8xvFsGUJ4lLGYv5WfUDjHJkfd qWscXNjgBEux4saUVo4sEOg1vtaAyHAnCjeIuAsS1HxG4XHVTPsaoCBQO+xO5pNk mZuOp6KBHaK4MFBiIsknxP3QXB0wBe/T11X107c3Yz1Tk9TlEsEB87DWJpaphOpt cxs3WuVma33m1VZr1pENFCqgtLFChyh7fdiJJPGTOmSZw4271Auebx0RD+lkgKTo OQKCAQAlvKeyA5uSdp2kPpGoGwIzZRWZaBVpo1elfDPuRyuZvABLARpRU2rs8Pbs PevqhLgeFN1FUZW2JIWIkIyh3dscoV3QOr3Rgjycexse3VUXza/4U9KBKflctCtg rJ5Zloo5qkqyAJglHLrnw3JXZ7pk8HCXCFuDmgWeyRvJwuvQSwczyCTRrQqdMPq9 ba+JJG0XlKBMQP7mWhYn5aX/att4+5eK8Id7gxo+HQ0xldBBvFONa85XgjBidn5r edOsJIcLLYyFE4swh/PNxy6D8Zt0mBB8VOM0wWNViPgiKskwu7P3aoGT9KmA0fzC zWnBUxsswH+SeBSZGFwu/pvqct90 -----END PRIVATE KEY----- ``` Upload this PEM file to your device.  ### Import Root Certificate Open your browser and import `root.crt` to the Trusted Root Certification Authorities from the `/bin/root/` directory.  ### Verify HTTPS  
×
Sign in
Email
Password
Forgot password
or
By clicking below, you agree to our
terms of service
.
Sign in via Facebook
Sign in via Twitter
Sign in via GitHub
Sign in via Dropbox
Sign in with Wallet
Wallet (
)
Connect another wallet
New to HackMD?
Sign up