Editing the OpenSSL configuration file

Last Updated : Oct 06, 2021 |

About this task

Manage the configuration of the OpenSSL file. You can set up a different configuration for a different CA. For example, you can specify an extension for signing your certificate or specify the information required for the certificate signing request, such as your country or company name.

Procedure

  1. Locate the OpenSSL default openssl.cnf file.

    On RHEL, the file is at /etc/pki/tls/openssl.cnf.

  2. Optional If you cannot locate the file, run the following command:

    find / -name openssl.cnf

  3. To copy the openssl.cnf file to the certificate home directory, run the following command:

    cp /etc/pki/tls/openssl.cnf /certificates

  4. To change directories to the certificate home directory, from the Linux® Operating System CLI, run the following command:

    cd /certificates

  5. To open the copied version of the openssl.cnf file in a text editor, run the command:

    vi /certificates/openssl.cnf

  6. Update the required parameters.
  7. Save changes to the openssl.cnf file.