# How to generate TLS with offline TLS tool

**URL:** <https://forum.search-guard.com/t/how-to-generate-tls-with-offline-tls-tool/2323>\
**Category:** Search Guard\
**Created:** [June 6, 2022, 10:48am UTC](https://forum.search-guard.com/t/how-to-generate-tls-with-offline-tls-tool/2323 "2022-06-06T10:48:20Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jis](https://avatars.discourse-cdn.com/v4/letter/j/77aa72/32.png) [@jis](https://forum.search-guard.com/u/jis)\
**Post date:** [June 6, 2022, 10:48am UTC](https://forum.search-guard.com/t/how-to-generate-tls-with-offline-tls-tool/2323/1 "2022-06-06T10:48:20Z")

</div>

Hi,  
I have installed the compatable version of SG after that i downloaded offline TLS tool  
I have added below commands in sgtls tool configuration file:

```auto
ca:
   root:
      dn: CN=root.ca.LDPA details(added here)OU=CA,O=Example Com\, Inc.,DC=example,DC=com
      keysize: 2048
      pkPassword: root-ca-password 
      validityDays: 3650
      file: root-ca.pem

```

and tried below command:  
/tools/sgtlstool.sh -c …/config/tlsconfig.yml -ca

```auto
but no files got generated (configured Root and intermediate CAs ).

What should i do?
```

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/pablo/32/1443_2.png) [@pablo](https://forum.search-guard.com/u/pablo)\
**Post date:** [June 8, 2022, 11:21am UTC](https://forum.search-guard.com/t/how-to-generate-tls-with-offline-tls-tool/2323/2 "2022-06-08T11:21:01Z")

</div>

@jis I’ve responded in your other thread.

> [@Not able to generate TLS certificate](https://forum.search-guard.com/t/not-able-to-generate-tls-certificate/2322/2):
>
> @jis Please try the below config instead. Please bear in mind that in yml files, correct indentation is crucial. All options under the root: and intermediate are at the same indent level. Also, you’ve duplicated ca: in your config. ca: root: dn: CN=root.ca.Lxxxxxxx.uxxx.xxxx.x,OU=SSL,O=Test,DC=com keysize: 2048 validityDays: 3650 pkPassword: xxx-xx-password file: root-ca.pem intermediate: dn: CN=node1.Lxxxxxxx.uxxx.xxxx.x,OU=SSL,O=Test,DC=com …

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [June 29, 2022, 11:21am UTC](https://forum.search-guard.com/t/how-to-generate-tls-with-offline-tls-tool/2323/3 "2022-06-29T11:21:47Z")

</div>

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.