Introduction to OpenSSL, part 2 -- Generating intermediate CA certificate

Dr. Rahul Remanan

CEO, Moad Computer

In this second part of the article series on using the OpenSSL library in linux, described here is the process of creating an intermediate certificate authority (CA) certificate for a self-signed certificate generation workflow.

Please note that the passwords and the method to pass them to OpenSSL used here are for educational purposes alone. They are very weak and are visible using tools such as ```ps```.

In production, please remember to update the passwords as well as the technique used for passing them accordingly.

Feel free to revisit the first part of this article series on creating a root CA certificate by following the link here. 

Maintaining the certificate revocation list serial numbers

Create private key for the intermediate CA certificate

Generate intermediate CA certificate signing request

Generate intermediate CA certificate

Set OS access permission and verify against the root CA certificate

Create CA certificate chain using the intermediate and root CA certificates

Appendix

Contents of the ```.ini``` file used for storing the configuration used to generate the intermediate CA certificate