CreateSelfSignedCert.md

description
Guide on creating self signing SSL certificates with OpenSSL.

Author: Clécio Varjão

How-to: Create a self-signed certificate

Using openssl

Generate a passphrase

openssl rand -base64 48 > passphrase.txt

Generate a Private Key

openssl genrsa -aes128 -passout file:passphrase.txt -out server.key 2048

Generate a CSR (Certificate Signing Request)

openssl req -new -passin file:passphrase.txt -key server.key -out server.csr -subj "/C=CA/ST=British Columbia/L=Victoria/O=Government of the Province of British Columbia/OU=FLNRORD/CN=example.com"

Remove Passphrase from Key

cp server.key server.key.org
openssl rsa -in server.key.org -passin file:passphrase.txt -out server.key

Generating a Self-Signed Certificate for 100 years

openssl x509 -req -days 36500 -in server.csr -signkey server.key -out server.crt

References: http://crohr.me/journal/2014/generate-self-signed-ssl-certificate-without-prompt-noninteractive-mode.html