Skip to content

Instantly share code, notes, and snippets.

@makeitcloudy

makeitcloudy/sslCertIpmiSupermicro.ps1

Created January 20, 2022 20:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save makeitcloudy/e0040f9390b2cf458e95227439cd931c to your computer and use it in GitHub Desktop.
Save makeitcloudy/e0040f9390b2cf458e95227439cd931c to your computer and use it in GitHub Desktop.
Download ZIP
IPMI Self Signed Certificate Supermicro - old and newer firmware
Raw
sslCertIpmiSupermicro.ps1
#region IPMI 3.19
#pem certs and keys are accepted by older ipmi like 3.19 in x9srl-f
openssl req -x509 -newkey rsa:1024 -sha1 -days 1095 -nodes -keyout ipmiKey.pem -out ipmiCert.pem -subj "/CN=[FQDNipmi]" -addext "subjectAltName=DNS:[FQDNipmiAlternative],DNS:https://[FQDNipmi],IP:[ipmiIP]"
#this cert may be used for your java certificate
#ipmi in this version does not like passphrase within the certificates
openssl pkcs12 -export -nodes -out ipmi.p12 -inkey ipmiKey.pem -in ipmiCert.pem -passout pass:
#endregion
#region IPMI 3.48
openssl req -x509 -newkey rsa:2048 -sha256 -days 1095 -nodes -keyout ipmiKey.key -out ipmiCert.crt -subj "/CN=[FQDNipmi]" -addext "subjectAltName=DNS:[FQDNipmiAlternative],DNS:https://[FQDNipmi],IP:[ipmiIP]"
#crt certificate works for the ipmi node on supermicro never the lesss windows needs pfx
openssl pkcs12 -export -out ipmiCert.pfx -inkey ipmiKey.key -in ipmiCert.crt
#crt certificate works for the ipmi node never the less java configuration needs csr or .p12
openssl pkcs12 -export -out ipmiCert.p12 -inkey ipmiKey.key -in ipmiCert.crt -certfile ipmiCert.crt
#endregion
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment