From 7214b9d200211e679db7bf94e392de7de587654f Mon Sep 17 00:00:00 2001 From: chouse Date: Tue, 18 Nov 2025 03:56:17 +0000 Subject: [PATCH] fixed certificate verify and bundle commands --- tls_docs/ca/certificate_signing.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tls_docs/ca/certificate_signing.md b/tls_docs/ca/certificate_signing.md index 6f8bd86..df86083 100644 --- a/tls_docs/ca/certificate_signing.md +++ b/tls_docs/ca/certificate_signing.md @@ -51,11 +51,11 @@ The *-CAcreateserial* will create a serial file to track each created certificat ### Verify the certificate and trust chain ``` openssl x509 -noout -text -in certs/server.crt -openssl verify -CAfile certs/ca-bundle.crt certs/server.crt # certs/server.crt +openssl verify -CAfile certs/ca-bundle.crt certs/server.crt ``` The `verify` command should return OK, verifying the trust chain. ### Create the certificate archive bundle and transfer to the server/user if the CSR is is provided, a key will not be bundled, as it will reside with the server or the user. Use the desired transfer method to move the TLS bundle to the desired location ``` -tar cvzf bundles/server-or-user.tar.gz certs/server-or-user (private/server-or-user.key added if key was created by the CA). +tar cvzf bundles/server-or-user.tar.gz certs/server-or-user certs/ca-bundle.crt (private/server-or-user.key added if key was created by the CA). ```