/ Home \ \ Subjects /

Subject: how create ssl cert?

24/09/2015 10:19 dudeofhong:
hi howw i can create ssl cert (key file) to use with this small server?
what i put on ca-path and ca-file? or leave blank?
thanks very much.
24/09/2015 19:21 Max:
External tools e.g. OpenSSL required. You can create self-signed certificate, it is easy, just two command:
openssl genrsa 1024 > ks.pem
openssl req -x509 -new -key ks.pem >> ks.pem

Here the script that do it online:

In this case leave unused field blank...

To create signed certificate you may e.g.:
1) Create ca.crt and ca.key (only once):
openssl req -nodes -new -x509 -keyout ca.key -out ca.crt -days 3650
2) Create certificate:
openssl req -nodes -new -keyout 1.key -out 1.csr -days 3650
3) Sign certificate:
openssl ca -out 1.crt -in 1.csr -days 3650 -crldays 3650

But.. Browsers don't know your sign, before user doesn't install your "ca" ...

User: Password: New user:   Save password: