Skip to content

Instantly share code, notes, and snippets.

@ichramm
Created June 5, 2014 13:48
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ichramm/d458e3296cb33f096761 to your computer and use it in GitHub Desktop.
Save ichramm/d458e3296cb33f096761 to your computer and use it in GitHub Desktop.
Create a self signed certificate
ichramm@wilderkrieger:ssl_certificate (master *)$ cat my.cnf
[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no
[req_distinguished_name]
C = UY
ST = Montevideo
L = Montevideo
O = Company
OU = test
CN = *.fakedomain.com
[v3_req]
keyUsage = keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[alt_names]
DNS.1 = *.fakedomain.com
DNS.2 = fakedomain.com
ichramm@wilderkrieger:ssl_certificate (master *)$ openssl genrsa -out fakedomain.com.key 2048
Generating RSA private key, 2048 bit long modulus
...................................+++
.........................................................+++
e is 65537 (0x10001)
ichramm@wilderkrieger:ssl_certificate (master *)$ openssl req -new -key fakedomain.com.key -out fakedomain.com.csr -config my.cnf
ichramm@wilderkrieger:ssl_certificate (master *)$ openssl x509 -req -extensions v3_req -days 3650 -in fakedomain.com.csr -signkey fakedomain.com.key -out fakedomain.com.crt -
extfile my.cnf
Signature ok
subject=/C=UY/ST=Montevideo/L=Montevideo/O=Company/OU=test/CN=*.fakedomain.com
Getting Private key
ichramm@wilderkrieger:ssl_certificate (master *)$
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment