Creating a Client Certificate
The Azure confidential ledger APIs require client certificate-based authentication. Only those certificates added to an allowlist during ledger creation or a ledger update can be used to call the confidential ledger Functional APIs.
You need a certificate in PEM format. You can create more than one certificate and add or delete them using ledger Update API.
We recommend using OpenSSL to generate certificates. If you have git installed, you can run OpenSSL in the git shell. Otherwise, you can install OpenSSL for your OS.
sudo apt-get install openssl
sudo yum install openssl -y
sudo zypper install openssl
You can then generate a certificate by running
openssl in a Bash or PowerShell terminal window:
openssl ecparam -out "privkey_name.pem" -name "secp384r1" -genkey openssl req -new -key "privkey_name.pem" -x509 -nodes -days 365 -out "cert.pem" -"sha384" -subj=/CN="ACL Client Cert"