Self Signed SSL certificate for *.dev.next.sc

self-signed-cert.md

Generate Local .dev.next.sc SSL Certificate

We will generate an "Always Trusted" certificate on out local Mac, this can be used to generate an SSL certificate for any site(s) on your Mac.

1. Setup Shared Files

cd
mkdir ssl
cd ssl

2. Generate Root SSL Certificate

openssl genrsa -des3 -out rootCA.key 2048

3. Generate Root PEM Certificate

openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.pem

You will be asked several questions, you can enter anything, such as:

Country Name: GB
State or Province Name: ScreenCloud
Locality Name: ScreenCloud
Organization Name: ScreenCloud
Organizational Unit Name: ScreenCloud Devs
Common Name: *.dev.next.sc
Email Address: devs@screen.cloud

4. Trust This Certificate on you Mac

Open Keychain Access Applications > Utilities > Keychain Access and go to the Certificates category on the left sidebar. Click File > Import Items and import the newly generated rootCA.pem file.

Double click the new entry that appears in Keychain Access and under the Trust accordion, select Always Trust for the When using this certificate: option.

5. Generate SSL Config Templates

Generate a csr config template:

touch server.csr.cnf

And paste the following in this file:

[req]
default_bits = 2048
prompt = no
default_md = sha256
distinguished_name = dn

[dn]
C=GB
ST=ScreenCloud
L=ScreenCloud
O=ScreenCloud
OU=ScreenCloud Devs
emailAddress=devs@screen.cloud
CN = *.dev.next.sc

Generate a v3 config template:

touch v3.ext

And paste the following in this file:

authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
subjectAltName = @alt_names

[alt_names]
DNS.1 = *.dev.next.sc

6. Generate the .dev.next.sc SSL Certificate

Generate a server.key file:

openssl req -new -sha256 -nodes -out server.csr -newkey rsa:2048 -keyout server.key -config <( cat server.csr.cnf )

Generate a server.crt file:

openssl x509 -req -in server.csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out server.crt -days 500 -sha256 -extfile v3.ext

7. Use the Generate server.key and server.crt

All done, now copy the generated server.key and server.crt to the root /ssl folder within the project and activate SSL via the .env as per the apps readme.md.