How to Generate Self-Signed Certificate with your own CA

 

In this blog I am going to demonstrate how to generate a self-sign certificate for your local domain for testing purpose.

Prerequisites 

You need to have a LINUX PC or a server to do this, because this script is wrote in bash. Other than that u have to install openssl package to generate certificate.

Download the self-sign certificate from GITHUB from this Link. Download.

Step:1: Extract the content

tar -xvzf selfsign-cert.tar.gz

Step: 2: Generate CA Certificate

./start

• Select "Genarate New CA Certificate" option
• Enter CA Name without space. 

Step: 3: Generate Host Certificate

./start

• Select "Genarate New Host Certificate" Option
• Enter Host Certificate name.
• Enter Domain list. If you are going to use it for multiple site, you have to mention each hostnames.

Step: 4: Sign Host Certificate

./start

• Select "Sign Host certificate" Option
• Enter Host Certificate you want to sign.
• Enter CA to sign with.

Sign Certificate and Private Key are locate in below path.

Signed Certificate Path.......: cert/server/sign/test.vidutech.org.pem

Private Key Path.................: cert/server/key/test.vidutech.org.key

You can use these sign certificate and private key to put in Apache or NGINX.

By installing CA certificate in browser, you can avoid CA certificate warning in browser.