Localhost self signed certification

certification.md

Como gerar um certificado para testes com https e http2

Artigo original: https://www.novatec-gmbh.de/en/blog/spring-boot-applications-tls-http2/

Certificado raiz

1. Criando certificado raiz keytool -genkeypair -alias root-ca -keyalg RSA -keysize 3072 -ext BC:c=ca:true -keystore ./root-ca/ca.jks -storepass secret -keypass secret

2. Exportando o certificado raiz keytool -exportcert -alias root-ca -keystore ./root-ca/ca.jks -rfc -file ./root-ca/ca.pem -storepass secret

Certificado assinado

3. Criando certificado do servidor keytool -genkeypair -alias localhost -keyalg RSA -keysize 3072 -dname "CN=com.tsfreitas.client,OU=Development,O=My Organization,C=BR" -ext BC:c=ca:false -ext "SAN:c=DNS:localhost,IP:127.0.0.1" -keystore ./server/server.jks -storepass secret -keypass secret

4. Criando o certificado assinado keytool -certreq -alias localhost -keystore ./server/server.jks -file ./server/server.csr -storepass secret -keypass secret

5. Exportando o certificado keytool -gencert -alias root-ca -keystore ./root-ca/ca.jks -infile ./server/server.csr -rfc -outfile ./server/server.pem -storepass secret -keypass secret

Vinculando os certificados

6. Vincular o certificado raiz no certificado do servidor keytool -importcert -noprompt -alias root-ca -keystore ./server/server.jks -file ./root-ca/ca.pem -storepass secret -keypass secret

7. Vincular certificado assinado keytool -importcert -noprompt -alias localhost -keystore ./server/server.jks -file ./server/server.pem -storepass secret -keypass secret

Adicionar chave raiz no Chrome

8. Entrar em chrome://settings/certificates -> Authorities -> Import e selecionar o arquivo ./root-ca/ca.epm