HP Open Source Security for OpenVMS Volume 2: HP SSL for ...

3 Using the Certificate Tool
Using the Certificate Tool
Starting the Certificate Tool
HP SSL for OpenVMS provides a certificate tool that is a simple menu-driven interface for viewing and
creating SSL certificates. The OpenSSL Certificate Tool enables you to perform the most important
certification functions with ease. Using it, you can view certificates and certificate requests, create certificate
requests, sign your own certificate, create your own certificate authority, and sign client certificate requests.
Additional hash functions are included.
NOTE Some OpenSSL commands are beyond the scope of the Certificate Tool. For these, use the
command-line OpenSSL utility. See Chapter 5 for more information
3.1 Starting the Certificate Tool
Run the Certificate Tool by entering the following command at the DCL command prompt:
$ @SSL$COM:SSL$CERT_TOOL
NOTE Only one user or process should use the Certificate Tool at a time. The tool does not have a
locking mechanism to prevent unsynchronized accesses of the database and serial file, which
could cause database corruption. This assumes that you started SSL using
SSL$STARTUP.COM.
Figure 3-1 shows the Certificate Tool's main menu.
Figure 3-1 Certificate Tool Main Menu
1. View a Certificate
2. View a Certificate Signing Request
3. Create a Certificate Signing Request
4. Create a Self-Signed Certificate
5. Create a CA (Certification Authority) Certificate
6. Sign a Certificate Signing Request
7. Hash Certificates
8. Hash Certificate Revocations
9. Exit
Enter Option: w
SSL Certificate Tool
Main Menu
VM-0868A-AI
37