User Tools

Site Tools


admintasks:makecert

This is an old revision of the document!


howto create self-signed certificates

certificate authority

openssl genrsa -des3 -out private/ca.key 2048
openssl req -new -x509 -days 3650 -key private/ca.key -out certs/ca.crt

server certificate

SITE=example_com
 
cd /etc/ssl/
openssl genrsa -out $SITE.key 2048
openssl req -new -sha256 -key $SITE.key -out $SITE.csr
openssl ca -out $SITE.crt -infiles $SITE.csr
 
rm newcerts/<index>.pem
rm $SITE.csr
mv $SITE.key private/
mv $SITE.crt certs/

httpd.conf:

SSLCertificateFile    /etc/ssl/certs/wildcard_30hopsmax_at.crt 
SSLCertificateKeyFile /etc/ssl/private/wildcard_30hopsmax_at.crt

CSR für CACert mit SubAltNames

admintasks/makecert.1398161547.txt.gz · Last modified: 2014/04/22 10:12 by hop

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki