|/ Home \||\ Subjects /|
|24/09/2015 10:19 dudeofhong:|
|hi howw i can create ssl cert (key file) to use with this small server? |
what i put on ca-path and ca-file? or leave blank?
thanks very much.
|24/09/2015 19:21 Max:|
|External tools e.g. OpenSSL required. You can create self-signed certificate, it is easy, just two command: |
openssl genrsa 1024 > ks.pem
openssl req -x509 -new -key ks.pem >> ks.pem
Here the script that do it online: smallsrv.com/gsert.cgi
In this case leave unused field blank...
To create signed certificate you may e.g.:
1) Create ca.crt and ca.key (only once):
openssl req -nodes -new -x509 -keyout ca.key -out ca.crt -days 3650
2) Create certificate:
openssl req -nodes -new -keyout 1.key -out 1.csr -days 3650
3) Sign certificate:
openssl ca -out 1.crt -in 1.csr -days 3650 -crldays 3650
But.. Browsers don't know your sign, before user doesn't install your "ca" ...