From 50d122268e482e11dde155f2277ccf1766c1c345 Mon Sep 17 00:00:00 2001 From: Olav Morken <olav.morken@uninett.no> Date: Wed, 11 May 2011 06:11:51 +0000 Subject: [PATCH] docs: Update IdP certificate generation in Google Apps tutorial. git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@2835 44740490-163a-0410-bde0-09ae8108e29a --- docs/simplesamlphp-googleapps.txt | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/docs/simplesamlphp-googleapps.txt b/docs/simplesamlphp-googleapps.txt index 01019b913..9b6e4f170 100644 --- a/docs/simplesamlphp-googleapps.txt +++ b/docs/simplesamlphp-googleapps.txt @@ -43,14 +43,11 @@ Edit `config.php`, and enable the SAML 2.0 IdP: For test purposes, you can skip this section, and use the certificate included in the simpleSAMLphp distribution. For a production system, you MUST generate a new certificate for your IdP. -Here is an example of openssl commands to generate a new key and a self signed certificate to use for signing SAML messages: +Here is an example of an openssl command to generate a new key and a self signed certificate to use for signing SAML messages: - openssl genrsa -des3 -out googleappsidp.key 2048 - openssl rsa -in googleappsidp.key -out googleappsidp.pem - openssl req -new -key googleappsidp.key -out googleappsidp.csr - openssl x509 -req -days 9999 -in googleappsidp.csr -signkey googleappsidp.key -out googleappsidp.crt + openssl req -newkey rsa:2048 -new -x509 -days 3652 -nodes -out googleappsidp.crt -keyout googleappsidp.pem -The certificate above will be valid for 9999 days (27 years). +The certificate above will be valid for 10 years. Here is an example of typical user input when creating a certificate request: -- GitLab