EDGE Toolkit Technical Guideline

PKI (Public Key Infrastructure)

Generate CA Key Pair

edgetk -pkey keygen -bits 1024 -prv "CA_Priv.pem" -pass nil -pub "CA_Public.pem"
CA key pair generated successfully:
Private key saved to: albanese.atwebpages.com/directrix/CA_Priv.pem
Public key saved to: albanese.atwebpages.com/directrix/CA_Public.pem
Fingerprint: slPAP/Jfac8f//2Y8vxA8Us7koS13BacZGTzYyvX9BY=
RSA (1024-bit)
+-----------------+
|    B^^^^^^/^^^^^|
|   oE*/X^^^%O@^^^|
|    oOoO ^+B*^X^^|
|    ..* .**o^+^@@|
|     +. S *B.B.. |
|       . *. + o  |
|           o ..+ |
|          .   ++.|
|              +o |
+-----------------+

Generate Self-Signed CA Certificate

edgetk -pkey certgen -key CA_Priv.pem -cert CA_Cert.pem -subj "/CN=Alice/OU=/O=/ST=/L=/C=/emailAddress=alice@test.com" -days 365
Self-signed CA certificate generated successfully:

Raw Content of CA_Cert.pem

-----BEGIN CERTIFICATE-----
MIICvzCCAiigAwIBAgIUJLn6r9MVHtKfO8TKo/gKG5gSgk4wDQYJKoZIhvcNAQEL
BQAwXTEJMAcGA1UEBhMAMQkwBwYDVQQIEwAxCTAHBgNVBAcTADEJMAcGA1UECRMA
MQkwBwYDVQQREwAxCTAHBgNVBAoTADEJMAcGA1UECxMAMQ4wDAYDVQQDEwVBbGlj
ZTAeFw0yNTA2MjQxMzM0MzVaFw0yNjA2MjQxMzM0MzVaMF0xCTAHBgNVBAYTADEJ
MAcGA1UECBMAMQkwBwYDVQQHEwAxCTAHBgNVBAkTADEJMAcGA1UEERMAMQkwBwYD
VQQKEwAxCTAHBgNVBAsTADEOMAwGA1UEAxMFQWxpY2UwgZ8wDQYJKoZIhvcNAQEB
BQADgY0AMIGJAoGBALSd/baCSR6iSU1HULYAqoj5lk2l5RLtwS9A0cgwONSdrJ1Q
omCBUPhnTmmaKc/0Mg+hLAYUvzMjUHKvQGhXCss/GAG3m4T6BELNcq63ujdneLEY
4Uy7XhT9ZWZ4Ot1cQuhOVLXfj9lA5pTU26uY842WOHSLDjfyOs+W9rjUmVJhAgMB
AAGjfDB6MA4GA1UdDwEB/wQEAwIB/jAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYB
BQUHAwEwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQU4wBzLAeJjDjC3k8kxvgP
jl/Pl/gwGQYDVR0RBBIwEIEOYWxpY2VAdGVzdC5jb20wDQYJKoZIhvcNAQELBQAD
gYEAgEjaYcJbGD42g/nKSyhi1Q/K3L0VjbNuMsS10hOYuni4kLpx81+ecUaRa7CG
MI2ldYJV+l54JYsIwSOKdQmE8T8UOe7rr3TibADg3wH7eit60qvqokfi03hrCuD+
ajgAzWGT9pg1o+Jgy20AE95lHlBVHmLvRuB2ZZjxOig2Mb4=
-----END CERTIFICATE-----

Certificate Content: CA_Cert.pem

edgetk -pkey text -cert CA_Cert.pem
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209671143512860309883599140161964502570903962190 (0x24b9faafd3151ed29f3bc4caa3f80a1b9812824e)
    Signature Algorithm: SHA256-RSA
        Issuer: C=,ST=,L=,STREET=,POSTALCODE=,O=,OU=,CN=Alice
        Validity
            Not Before: Jun 24 13:34:35 2025 UTC
            Not After : Jun 24 13:34:35 2026 UTC
        Subject: C=,ST=,L=,STREET=,POSTALCODE=,O=,OU=,CN=Alice
        Subject Public Key Info:
            Public Key Algorithm: RSA
                Public-Key: (1024 bit)
                Modulus:
                    b4:9d:fd:b6:82:49:1e:a2:49:4d:47:50:b6:00:aa:
                    88:f9:96:4d:a5:e5:12:ed:c1:2f:40:d1:c8:30:38:
                    d4:9d:ac:9d:50:a2:60:81:50:f8:67:4e:69:9a:29:
                    cf:f4:32:0f:a1:2c:06:14:bf:33:23:50:72:af:40:
                    68:57:0a:cb:3f:18:01:b7:9b:84:fa:04:42:cd:72:
                    ae:b7:ba:37:67:78:b1:18:e1:4c:bb:5e:14:fd:65:
                    66:78:3a:dd:5c:42:e8:4e:54:b5:df:8f:d9:40:e6:
                    94:d4:db:ab:98:f3:8d:96:38:74:8b:0e:37:f2:3a:
                    cf:96:f6:b8:d4:99:52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Content Commitment, Key Encipherment, Data Encipherment, Key Agreement, Certificate Sign, CRL Sign
            X509v3 Extended Key Usage:
                Client Authentication, Server Authentication
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:00:73:2C:07:89:8C:38:C2:DE:4F:24:C6:F8:0F:8E:5F:CF:97:F8
            X509v3 Subject Alternative Name:
                email:alice@test.com
    Signature Algorithm: SHA256-RSA
         80:48:da:61:c2:5b:18:3e:36:83:f9:ca:4b:28:62:d5:0f:ca:
         dc:bd:15:8d:b3:6e:32:c4:b5:d2:13:98:ba:78:b8:90:ba:71:
         f3:5f:9e:71:46:91:6b:b0:86:30:8d:a5:75:82:55:fa:5e:78:
         25:8b:08:c1:23:8a:75:09:84:f1:3f:14:39:ee:eb:af:74:e2:
         6c:00:e0:df:01:fb:7a:2b:7a:d2:ab:ea:a2:47:e2:d3:78:6b:
         0a:e0:fe:6a:38:00:cd:61:93:f6:98:35:a3:e2:60:cb:6d:00:
         13:de:65:1e:50:55:1e:62:ef:46:e0:76:65:98:f1:3a:28:36:
         31:be
IsValid: true

Generate Asymmetric Key Pair (2048 bits)

edgetk -pkey keygen -bits 1024 -prv "Private.pem" -pass nil -pub "Public.pem"
Key pair generated successfully:
Private key saved to: albanese.atwebpages.com/directrix/Private.pem
Public key saved to: albanese.atwebpages.com/directrix/Public.pem
Fingerprint: MNzojILSDnMo8wzcryBEoN+bM5g1PZFyU5kDmor7vbc=
RSA (1024-bit)
+-----------------+
|    +%&^^^^^^^^^^|
|   .oE*BX^^^^^^^^|
|    .oo..O^^O^^^^|
|     ... *=o^&^/O|
|      . S *+B*B*o|
|       . *  .=o=.|
|              + o|
|             . . |
|                 |
+-----------------+

Private Key Details

edgetk -pkey text -key "Private.pem"
Private key details:
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
RSA Private-Key: (1024-bit)
Modulus (N):
    00:b2:eb:a7:3f:79:d2:72:96:31:41:67:73:57:4f:
    e4:58:61:5f:ad:a6:ac:dc:7e:87:8d:92:88:78:ab:
    ae:fc:27:fb:88:bd:86:3c:42:93:12:b4:f1:f7:c5:
    13:ed:d9:b1:6f:97:e7:41:7a:12:b2:9c:c6:32:07:
    6a:f0:16:16:5b:64:cf:a9:49:65:b0:b4:bb:88:06:
    c9:7e:88:e8:40:d2:43:b8:9e:ae:db:d6:77:1e:75:
    f4:68:31:7b:8b:fd:89:60:bc:97:e0:3a:4f:8b:34:
    8d:c8:aa:fa:94:90:c3:56:6f:fd:6a:02:c0:43:cd:
    25:b0:11:18:20:06:1b:65:a5
Public Exponent (E): 65537 (0x10001)
Private Exponent (D):
    60:f3:40:95:2c:b5:d4:51:7e:2f:2a:97:5d:60:75:
    23:4e:e0:41:80:67:7a:b3:35:50:89:6e:59:b4:ee:
    04:c4:c5:8f:ba:e2:da:14:59:0d:71:ef:0b:8b:46:
    d9:43:74:da:3b:3d:9c:45:41:8c:77:57:0e:14:e6:
    e5:61:92:8a:db:2c:77:0a:32:e8:ed:0b:2c:65:01:
    27:23:ac:52:fc:cf:de:c8:e8:9e:82:36:d9:65:5f:
    fc:84:cd:a0:cd:1f:1f:0d:ed:a0:20:0f:7a:8c:c4:
    ff:0b:26:72:ea:f0:7b:f9:96:76:05:86:19:35:74:
    32:53:e2:84:65:80:db:a1
Prime 1 (P):
    ca:28:cf:9e:61:5f:a3:ff:f1:75:72:ea:3c:0d:ae:
    4b:81:df:1f:45:26:14:11:96:86:17:6e:55:72:b4:
    9a:28:09:67:f0:00:c5:09:b1:f1:9d:35:6c:b1:6c:
    24:17:74:b9:38:b0:55:90:3d:7f:0d:28:41:4c:6b:
    0b:06:1b:f3
Prime 2 (Q):
    e2:92:6b:3d:06:5e:ca:93:61:9f:f2:51:5e:12:85:
    c5:e2:cf:b0:26:1f:cb:95:d5:3e:2b:82:81:21:4f:
    9c:97:0f:61:05:6d:bf:8e:34:de:98:99:96:05:59:
    e5:59:ff:48:b7:1e:2a:f0:04:f3:f9:ad:a4:9f:87:
    7a:7f:56:07
Exponent 1 (D mod (P-1)):
    41:2f:5f:a2:e6:2a:fc:aa:ae:a4:fc:64:e2:f0:56:
    5f:2a:85:53:83:ec:7f:54:1c:81:28:54:ff:60:79:
    33:ab:ed:3c:82:7a:fd:0d:df:3e:d5:3e:40:ca:04:
    e0:ae:5f:88:c9:ea:b1:ec:4c:a8:07:0a:0f:e4:20:
    2f:f1:cc:59
Exponent 2 (D mod (Q-1)):
    a0:64:3a:9a:36:ba:3f:f9:d9:70:5b:20:12:d2:55:
    f4:e2:3d:58:5b:84:c2:a0:4d:16:f7:c2:29:1b:a5:
    ba:1a:8d:fe:86:d3:4c:79:a5:1f:b7:33:72:aa:53:
    1b:33:7c:ae:c3:43:0d:ee:5f:f3:3e:db:17:e0:ff:
    0d:4e:bb:5d
Coefficient (Q^-1 mod P):
    a0:be:1e:90:12:00:f5:c5:65:66:50:cb:5a:84:73:
    6f:84:ed:34:f7:e1:63:e3:68:ea:1b:12:3c:02:8d:
    e2:6b:16:c0:bf:e0:16:7a:55:ad:a9:37:65:75:ca:
    f8:57:83:79:7b:57:09:49:d7:db:df:f6:b9:8a:c0:
    e6:ce:b3:99

KeyID: 295aa910ac1c2b01b4d410aac6f1430ed9aed88f

Public Key Details

edgetk -pkey text -key "Public.pem"
Public key details:
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCy66c/edJyljFBZ3NXT+RYYV+t
pqzcfoeNkoh4q678J/uIvYY8QpMStPH3xRPt2bFvl+dBehKynMYyB2rwFhZbZM+p
SWWwtLuIBsl+iOhA0kO4nq7b1ncedfRoMXuL/YlgvJfgOk+LNI3IqvqUkMNWb/1q
AsBDzSWwERggBhtlpQIDAQAB
-----END PUBLIC KEY-----
RSA Public-Key: (1024-bit)
Modulus:
    00:b2:eb:a7:3f:79:d2:72:96:31:41:67:73:57:4f:
    e4:58:61:5f:ad:a6:ac:dc:7e:87:8d:92:88:78:ab:
    ae:fc:27:fb:88:bd:86:3c:42:93:12:b4:f1:f7:c5:
    13:ed:d9:b1:6f:97:e7:41:7a:12:b2:9c:c6:32:07:
    6a:f0:16:16:5b:64:cf:a9:49:65:b0:b4:bb:88:06:
    c9:7e:88:e8:40:d2:43:b8:9e:ae:db:d6:77:1e:75:
    f4:68:31:7b:8b:fd:89:60:bc:97:e0:3a:4f:8b:34:
    8d:c8:aa:fa:94:90:c3:56:6f:fd:6a:02:c0:43:cd:
    25:b0:11:18:20:06:1b:65:a5
Exponent: 65537 (0x10001)

Generate Certificate Signing Request (CSR)

edgetk -pkey req -key Private.pem -cert "Cert.csr" -subj "/CN=Bob/OU=/O=/ST=/L=/C=/emailAddress=bob@test.com"
Certificate Signing Request generated successfully:

Raw Content of Cert.csr

-----BEGIN CERTIFICATE REQUEST-----
MIIB4jCCAUsCAQAweDEJMAcGA1UEBhMAMQkwBwYDVQQIEwAxCTAHBgNVBAcTADEJ
MAcGA1UECRMAMQkwBwYDVQQREwAxCTAHBgNVBAoTADEJMAcGA1UECxMAMQwwCgYD
VQQDEwNCb2IxGzAZBgkqhkiG9w0BCQEMDGJvYkB0ZXN0LmNvbTCBnzANBgkqhkiG
9w0BAQEFAAOBjQAwgYkCgYEAsuunP3nScpYxQWdzV0/kWGFfraas3H6HjZKIeKuu
/Cf7iL2GPEKTErTx98UT7dmxb5fnQXoSspzGMgdq8BYWW2TPqUllsLS7iAbJfojo
QNJDuJ6u29Z3HnX0aDF7i/2JYLyX4DpPizSNyKr6lJDDVm/9agLAQ80lsBEYIAYb
ZaUCAwEAAaAqMCgGCSqGSIb3DQEJDjEbMBkwFwYDVR0RBBAwDoEMYm9iQHRlc3Qu
Y29tMA0GCSqGSIb3DQEBCwUAA4GBAIgmHnLYwmVC5IvjIDYstin6yIUA9IWsMBYR
UN91GbY82XQprvpUp7y3Y86I8/jhyrBgplbgC0DaZiZtLWQD6nH3cImuZJhl7eDg
1CqddRVRVMVVbV3/aZDmO77RUlXeC4gZn44W81DR+ZQydgFlQYP+hzMBd9CyxZrf
LW+JiU85
-----END CERTIFICATE REQUEST-----

Certificate Content: Cert.csr

edgetk -pkey text -cert Cert.csr
Certificate Request:
    Data:
        Version: 0 (0x0)
        Subject: C=,ST=,L=,STREET=,POSTALCODE=,O=,OU=,CN=Bob,emailAddress=bob@test.com
        Subject Public Key Info:
            Public Key Algorithm: RSA
                Public-Key: (1024 bit)
                Modulus:
                    b2:eb:a7:3f:79:d2:72:96:31:41:67:73:57:4f:e4:
                    58:61:5f:ad:a6:ac:dc:7e:87:8d:92:88:78:ab:ae:
                    fc:27:fb:88:bd:86:3c:42:93:12:b4:f1:f7:c5:13:
                    ed:d9:b1:6f:97:e7:41:7a:12:b2:9c:c6:32:07:6a:
                    f0:16:16:5b:64:cf:a9:49:65:b0:b4:bb:88:06:c9:
                    7e:88:e8:40:d2:43:b8:9e:ae:db:d6:77:1e:75:f4:
                    68:31:7b:8b:fd:89:60:bc:97:e0:3a:4f:8b:34:8d:
                    c8:aa:fa:94:90:c3:56:6f:fd:6a:02:c0:43:cd:25:
                    b0:11:18:20:06:1b:65:a5
                Exponent: 65537 (0x10001)
        Requested Extensions:
            X509v3 Subject Alternative Name:
                email:bob@test.com
    Signature Algorithm: SHA256-RSA
         88:26:1e:72:d8:c2:65:42:e4:8b:e3:20:36:2c:b6:29:fa:c8:
         85:00:f4:85:ac:30:16:11:50:df:75:19:b6:3c:d9:74:29:ae:
         fa:54:a7:bc:b7:63:ce:88:f3:f8:e1:ca:b0:60:a6:56:e0:0b:
         40:da:66:26:6d:2d:64:03:ea:71:f7:70:89:ae:64:98:65:ed:
         e0:e0:d4:2a:9d:75:15:51:54:c5:55:6d:5d:ff:69:90:e6:3b:
         be:d1:52:55:de:0b:88:19:9f:8e:16:f3:50:d1:f9:94:32:76:
         01:65:41:83:fe:87:33:01:77:d0:b2:c5:9a:df:2d:6f:89:89:
         4f:39

Sign CSR

edgetk -pkey x509 -root CA_Cert.pem -key CA_Priv.pem -days 365 -cert Cert.csr CERTIFICATE.crt
Certificate generated successfully:

Raw Content of CERTIFICATE.crt

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate Content: CERTIFICATE.crt

edgetk -pkey text -cert CERTIFICATE.crt
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344030954902003540111727159840558008282793338620 (0xeb6c6eb30b41eaed67f731546b59dccffa1f66fc)
    Signature Algorithm: SHA256-RSA
        Issuer: C=,ST=,L=,STREET=,POSTALCODE=,O=,OU=,CN=Alice
        Validity
            Not Before: Jun 24 13:34:35 2025 UTC
            Not After : Jun 24 13:34:35 2026 UTC
        Subject: C=,ST=,L=,STREET=,POSTALCODE=,O=,OU=,CN=Bob
        Subject Public Key Info:
            Public Key Algorithm: RSA
                Public-Key: (1024 bit)
                Modulus:
                    b2:eb:a7:3f:79:d2:72:96:31:41:67:73:57:4f:e4:
                    58:61:5f:ad:a6:ac:dc:7e:87:8d:92:88:78:ab:ae:
                    fc:27:fb:88:bd:86:3c:42:93:12:b4:f1:f7:c5:13:
                    ed:d9:b1:6f:97:e7:41:7a:12:b2:9c:c6:32:07:6a:
                    f0:16:16:5b:64:cf:a9:49:65:b0:b4:bb:88:06:c9:
                    7e:88:e8:40:d2:43:b8:9e:ae:db:d6:77:1e:75:f4:
                    68:31:7b:8b:fd:89:60:bc:97:e0:3a:4f:8b:34:8d:
                    c8:aa:fa:94:90:c3:56:6f:fd:6a:02:c0:43:cd:25:
                    b0:11:18:20:06:1b:65:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage:
                Client Authentication, Server Authentication
            X509v3 Subject Key Identifier:
                29:5A:A9:10:AC:1C:2B:01:B4:D4:10:AA:C6:F1:43:0E:D9:AE:D8:8F
            X509v3 Authority Key Identifier:
                keyid:E3:00:73:2C:07:89:8C:38:C2:DE:4F:24:C6:F8:0F:8E:5F:CF:97:F8
            X509v3 Subject Alternative Name:
                email:bob@test.com
    Signature Algorithm: SHA256-RSA
         89:76:c2:b8:df:1f:d2:99:af:04:b8:73:2e:da:04:bf:7a:f6:
         43:fe:b2:66:97:fe:d4:0d:c7:0f:9b:25:77:b7:17:05:52:7a:
         04:99:7c:c9:55:09:5c:a2:21:59:10:11:35:e6:24:f5:78:7b:
         b4:c8:41:9e:ca:3a:51:02:01:ac:98:c9:d8:bd:22:55:3a:12:
         2d:1c:2a:e5:8c:8d:1a:c1:a5:69:61:bd:45:65:89:df:f9:16:
         6e:eb:aa:3a:e1:8e:80:0b:2c:fa:b9:53:4a:f8:b6:06:07:2b:
         51:07:e0:45:0d:c6:cd:0c:ce:db:c9:b1:7e:a4:51:df:b7:8f:
         ec:18
IsValid: true

Verify Digital Signature of Certificate

edgetk -pkey check -cert CERTIFICATE.crt -key CA_Public.pem
Certificate signature verification status: Valid signature
Verified: true

Digital Signature Generation

edgetk -pkey sign -algorithm rsa -md sha256 -key "Private.pem" "test.txt" > sign.txt
Digital signature generated successfully:
91804fa35d8360dca7915cac7c050afaf295a251c74ff2a739a4d46f35f7dbb661c3937d7a5b2533808c3736c8ca1ce1a7462dee7f5b604236fa96366058fd0aa0b9e400dd548f4d2c7dd2fcc67dcbd2fa7e36c145d3d918768458e521d9a55abe596629da12e504a79dd079edbdac91ef17290ea4bac8a6f8165191ffed185e

Digital Signature Verification

edgetk -pkey verify -algorithm rsa -md sha256 -key "Public.pem" -signature "91804fa35d8360dca7915cac7c050afaf295a251c74ff2a739a4d46f35f7dbb661c3937d7a5b2533808c3736c8ca1ce1a7462dee7f5b604236fa96366058fd0aa0b9e400dd548f4d2c7dd2fcc67dcbd2fa7e36c145d3d918768458e521d9a55abe596629da12e504a79dd079edbdac91ef17290ea4bac8a6f8165191ffed185e" "test.txt"
Signature verified successfully:
Verified: true

Save Certificate and Private Key in PFX Format

edgetk -pkey pkcs12 -key Private.pem -cert CERTIFICATE.crt
Certificate and private key saved successfully in PFX format:
PFX Certificate Passphrase: The certificate has been generated: CERTIFICATE.pfx

Analyze PFX Certificate

edgetk -pkey pkcs12 -cert CERTIFICATE.pfx
PFX certificate analyzed successfully:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCy66c/edJyljFBZ3NXT+RYYV+t
pqzcfoeNkoh4q678J/uIvYY8QpMStPH3xRPt2bFvl+dBehKynMYyB2rwFhZbZM+p
SWWwtLuIBsl+iOhA0kO4nq7b1ncedfRoMXuL/YlgvJfgOk+LNI3IqvqUkMNWb/1q
AsBDzSWwERggBhtlpQIDAQAB
-----END PUBLIC KEY-----
Expiry:         Wednesday, 24-Jun-26 13:34:35 UTC
Common Name:    Bob
Issuer:         CN=Alice,OU=,O=,POSTALCODE=,STREET=,L=,ST=,C=
Subject:        CN=Bob,OU=,O=,POSTALCODE=,STREET=,L=,ST=,C=
EmailAddresses: [bob@test.com]
SerialNumber:   eb6c6eb30b41eaed67f731546b59dccffa1f66fc
AuthorityKeyId: e300732c07898c38c2de4f24c6f80f8e5fcf97f8
Enter PEM Passphrase: -----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----