Differences

This shows you the differences between two versions of the page.

Link to this comparison view

commands:nems-cert [2017/11/09 23:01]
Robbie Ferguson Typo
commands:nems-cert [2019/02/04 11:35]
Line 1: Line 1:
-=====Command:​ nems-cert===== 
  
-{{:​commands:​screenshot_from_2017-11-09_22-40-23.png?​400|}} 
- 
-When you run [[commands:​nems-init|nems-init]] NEMS generates your SSL certificates. However, if you ever want to update your certs, you definitely don't want to run //​nems-init//​ again - that'd wipe out your configuration. 
- 
-So //​nems-cert//​ has you covered. 
- 
-<code bash>​sudo nems-cert</​code>​ 
- 
-This will take you through the certificate creation process once again, generate your certificates and certificate authority, install them, and restart the services which use them. 
- 
-<WRAP center round tip 60%> 
-If you generate a new certificate for NEMS you may need to delete the old one from your browser and restart, and then create a new exception for the [[:​self-signed-certs|self-signed certificate]]. 
-</​WRAP>​ 
- 
-====Modes Of Operation==== 
- 
-===Generic Settings=== 
- 
-Do you want to create a certificate quickly? The Generic Settings option allows you to create and deploy a certificate very quickly with absolutely no user input needed. 
- 
-===Custom Settings=== 
- 
-Custom Settings allows you to manually specify some of the information for your certificate. This is not generally public information,​ but will be seen when you view the certificate in your browser (for example). 
- 
-  * **Country Code** - This is your 2-digit country code. US for United States of America, or CA for Canada, for example. By default, the country code from your keyboard locale settings will be used. 
-  * **Province/​State** - The textual representation of your province/​state. For me, this is: Ontario 
-  * **Your City** - The textual name of your city. For me, this is: Barrie 
-  * **Company Name or Your Name** - Like all other fields for your cert, you have to fill this in. So if you don't have a company, just use your name, or make something up. 
-  * **Your email address** - Your complete email address. This will not be shared, but is required to generate a self-signed certificate. 
- 
-====Specifications==== 
- 
-//​nems-cert//​ generates SHA256 encrypted certificates with RSA 2048 keys. 
- 
-====Viewing Your Certificate Information==== 
- 
-Once you have generated your SSL Certificate,​ you can view it with the following command: <code bash>​sudo nems-info sslcert</​code>​ 
- 
-====Use of nems-cert Outside of NEMS Linux==== 
- 
-Of course, the work I do on NEMS is freely available. Just don't forget to throw something in the [[https://​donate.category5.tv/​|Tip Jar]] if you like what I do. 
- 
-[[https://​raw.githubusercontent.com/​Cat5TV/​nems-scripts/​master/​gen-cert.sh|Source Code]] 
- 
-If using nems-cert (or, gen-cert.sh in this case) outside NEMS, you'll simply need to install a few components: <code bash>​sudo apt update && sudo apt install openssl dialog</​code>​ 
- 
-You'll also want to change where the certs are saved to within the source code since the NEMS locations won't be relevant. 
  • commands/nems-cert.txt
  • Last modified: 2019/02/04 11:35
  • (external edit)