Dell Hybrid Client version 2403 Administrator's Guide

Ensure that you get your application signed and have procured the signed certificate from the concerned authority.

• Do the following to create a Self-Signed certificate:
  1. Generate a Private Key.

     genrsa -des3 -out private_key_file_name.key 2048

  2. Generate a Certificate Signing Request (CSR).

     openssl req –new –key private_key_file_name.key -sha256 –out csr_file_name.csr

  3. Generating a Self-Signed Certificate.

     x509 -req -days 365 -in csr_file_name.csr -signkey private_key_file_name.key -sha256 -out cert_file_name.cer

  4. Sign a binary.

     openssl dgst -sha256 -sign private_key_file_name.key -out binary_file_name.signature binary_file_name

  5. Create a bundle package along with signature by following these steps:
     • Copy binary_file_name.signature and binary_file_name to the linux device.
     • Open the terminal and go to the folder where both the files are copied.
     • Run $ tar -czf binary_file_name.tar.gz binary_file_name.signature binary_file_name.
       NOTE:Note: Binary_file_name should be the same as the file name that is used during binary signing in above steps. For example, if the file name is test.deb, then run $ tar -czf test.tar.gz test.signature test.deb.
• Do the following to test offline verification of the signature of the signed binary:
  1. To test the binary.

     openssl x509 -pubkey -noout -in cert_file_name.cer > public_key_file_name.cer

  2. Verify a binary with signature.

     openssl dgst -sha256 -verify public_key_file_name.cer -signature binary_file_name.signature binary_file_name
     

• Follow these steps to install the created certificate using Wyse Management Suite: