Showing posts with label OpenSSL. Show all posts
Showing posts with label OpenSSL. Show all posts

Sunday, November 7, 2021

How to Generate Self-Signed Certificate with your own CA

 

How to Generate Self-Signed Certificate with your own CA

In this blog I am going to demonstrate how to generate a self-sign certificate for your local domain for testing purpose.

Prerequisites 

You need to have a LINUX PC or a server to do this, because this script is wrote in bash. Other than that u have to install openssl package to generate certificate.

Download the self-sign certificate from GITHUB from this Link. Download.

Step:1: Extract the content

tar -xvzf selfsign-cert.tar.gz










Step: 2: Generate CA Certificate

./start
  • Select "Genarate New CA Certificate" option
  • Enter CA Name without space. 

























Step: 3: Generate Host Certificate

./start
  • Select "Genarate New Host Certificate" Option
  • Enter Host Certificate name.
  • Enter Domain list. If you are going to use it for multiple site, you have to mention each hostnames.



























Step: 4: Sign Host Certificate

./start
  • Select "Sign Host certificate" Option
  • Enter Host Certificate you want to sign.
  • Enter CA to sign with.



























Sign Certificate and Private Key are locate in below path.

Signed Certificate Path.......: cert/server/sign/test.vidutech.org.pem
Private Key Path.................: cert/server/key/test.vidutech.org.key

You can use these sign certificate and private key to put in Apache or NGINX.

By installing CA certificate in browser, you can avoid CA certificate warning in browser.