Skip to main content

Possible issue in CMA certificate creation (autosigned)

  • September 3, 2025
  • 1 reply
  • 69 views

Forum|alt.badge.img+10

Hello all,

 

in the documentation Configurer les certificats | Centreon Documentation , when you give the command line to create an autosigned certificate, I think there is an issue in the command.

 

openssl req -new -subj '/CN={server_hostname}' \
-addext "subjectAltName = CN:{server_hostname}, DNS:{alt_poller_DNS}, IP:{alt_poller_IP}" \
-days 365 -nodes -x509 \
-newkey rsa:2048 -keyout {key} -out {cert}

 

the parameter “-x509” (autosigned) must be BEFORE the parameter “-days 365”. there is no sense to give the duration before to say there is an autosigned certificate (x509).

But maybe am I wrong :-D

 

Laurent

 

 

1 reply

fmattes
Centreonian
Forum|alt.badge.img+10
  • Centreonian
  • October 1, 2025

Hi ​@LaurentV ,
Thanks for pointing this out.
For the OpenSSL utility, the order of options like -x509 and -days doesn't matter.

The program parses the entire command line before acting on it. So, the command as written is functionally correct.