Sunday, April 12, 2020

How to Make A Self Signed SSL Certificate Using apache openssl

Make Your Own Self Signed Certificate Using openssl

Step 1: use openssl command

this will make a new key called server.key and a new certificate called server.crt. the expiration will be 2 years from now.

openssl req -x509 -nodes -days 730 -newkey rsa:2048 -keyout server.key -out server.crt

openssl session
This command will make a file called server.key, containing your private key, with no password, and a server certificate called server.crt.

Make a Certificate Request and A Password Protected Private key

openssl req -new -passout pass:"Secret" -keyout priv-pass.key -subj "/" -out server.csr -sha512 -newkey rsa:2048

making a new private key with password=Secret
Decrypt the private key with your password
openssl rsa -in priv-pass.key -passin pass:'Secret' | head -n2

decrypting the key


No comments:

Post a Comment