| / Home \ | \ Subjects / |
| 24/09/2015 10:19 dudeofhong: |
| hi howw i can create ssl cert (key file) to use with this small server? what i put on ca-path and ca-file? or leave blank? thanks very much. |
| 24/09/2015 19:21 Max: |
| External tools e.g. OpenSSL required. You can create self-signed certificate, it is easy, just two command: openssl genrsa 1024 > ks.pem openssl req -x509 -new -key ks.pem >> ks.pem Here the script that do it online: smallsrv.com/gsert.cgi In this case leave unused field blank... To create signed certificate you may e.g.: 1) Create ca.crt and ca.key (only once): openssl req -nodes -new -x509 -keyout ca.key -out ca.crt -days 3650 2) Create certificate: openssl req -nodes -new -keyout 1.key -out 1.csr -days 3650 3) Sign certificate: openssl ca -out 1.crt -in 1.csr -days 3650 -crldays 3650 But.. Browsers don't know your sign, before user doesn't install your "ca" ... |