client certificate commands

client_cert_commands.txt

#commands to generate client private and public/cert key. Here .pem is the cert or public key and .key is private key. 

#generate client private key
openssl genrsa -out client_private.key 4096

#generate client public key cert request
openssl req -new -nodes -key client_private.key -out client.csr -config client_request.config

#generate and sign the client public key /cert using CA root private and public key
openssl x509 -req -sha512 -days 365 -in client.csr -CA ../rootCA.pem -CAkey ../rootCA.key -CAcreateserial -out client_public.pem -extfile client_cert.config

#validate the client public using CA root public key
openssl verify -CAfile ../rootCA.pem client_public.pem

#to check the SHA algo and test of the public cert
openssl x509 -text -noout -in client_public.pem