Creating a self signed certificate in a pfx format on a mac.

SelfSignedCert.md

Create Self Signed Certificate

Introduction

Every now and then I need to create a self signed certificate in azure for something. In my particular case its Azure B2C. I am using a mac so its not simply just running something like

New-SelfSignedCertificate `
    -KeyExportPolicy Exportable `
    -Subject "CN=yourappname.yourtenant.onmicrosoft.com" `
    -KeyAlgorithm RSA `
    -KeyLength 2048 `
    -KeyUsage DigitalSignature `
    -NotAfter (Get-Date).AddMonths(12) `
    -CertStoreLocation "Cert:\CurrentUser\My"

Procedure

Create Cert

• Create a key

  • openssl genrsa -out key.pem 2048

• Create certifcate signin request

  • openssl req -new -sha256 -key key.pem -out csr.csr
  • enter whatever information you wish, good practice to include a password

• Create certificate

  • openssl req -x509 -sha256 -days 365 -key key.pem -in csr.csr -out certificate.pem

Convert to .pfx file

openssl pkcs12 -export -out samlIdpCert.pfx -inkey key.pem -in certificate.pem

References

• Create Self Signed SSL Certificate with OpenSSL
• Create a .pfx/.p12 Certificate File Using OpenSSL