OpenSSL Generating a Self-Signed Certificate: Difference between revisions

From UNIX Systems Administration
Jump to navigation Jump to search
m (Michael Kohler moved page Generating a Self-Signed SSL Certificate to OpenSSL Generating a Self-Signed Certificate without leaving a redirect)
No edit summary
 
(One intermediate revision by the same user not shown)
Line 3: Line 3:
# If required follow the [[OpenSSL Generating a Private Key]] procedure.
# If required follow the [[OpenSSL Generating a Private Key]] procedure.
# If required follow the [[OpenSSL Generating a Certificate Signing Request]] procedure.
# If required follow the [[OpenSSL Generating a Certificate Signing Request]] procedure.
# The CSR file will be used to generate the self-signed certificate.
# The private key and CSR files will be used to generate the self-signed certificate.
## <tt>'''# openssl req -new -key <key_name>.key -out <csr_name>.csr'''</tt>
## <tt>'''openssl x509 -req -days <# number of days> -in <csr_name>.csr -signkey <key_name>.key -out <crt_name>.crt'''</tt>
# Enter the information as required by the prompts.
# Enter the information as required by the prompts.
# Verify the checksum of the key, this will be used to verify the CSR and the self signed certificate.
# Verify the checksum of the key matches the checksum CSR and the self-signed certificate.
## <tt>'''# openssl req -noout -modulus -in <csr_name>.csr | openssl md5'''</tt>
## <tt>'''openssl x509 -noout -modulus -in <crt_name>.crt | openssl md5'''</tt>


== Further Reading ==
== Further Reading ==

Latest revision as of 18:31, 21 February 2013

Generate a Self-Signed Certificate

Apache with mod_ssl Enabled

  1. If required follow the OpenSSL Generating a Private Key procedure.
  2. If required follow the OpenSSL Generating a Certificate Signing Request procedure.
  3. The private key and CSR files will be used to generate the self-signed certificate.
    1. openssl x509 -req -days <# number of days> -in <csr_name>.csr -signkey <key_name>.key -out <crt_name>.crt
  4. Enter the information as required by the prompts.
  5. Verify the checksum of the key matches the checksum CSR and the self-signed certificate.
    1. openssl x509 -noout -modulus -in <crt_name>.crt | openssl md5

Further Reading

  1. How to Generate SSL key, CSR, and Self Signed Certificate for Apache
Retrieved from "http://www.outlandsmud.com/wiki/index.php?title=OpenSSL_Generating_a_Self-Signed_Certificate&oldid=394"