Additions:
Openssl as a client
openssl s_client -connect www.domain.com:443
Additions:
Deletions:
Additions:
openssl genrsa -out server.key 4096
Additions:
openssl req -new -x509 -key server.key -out server.crt -days 360 -set_serial 200711
Deletions:
openssl req -new -x509 -key server.key -out server.crt -days 360
Additions:
If you do not wish to go through the CSR process, and do not wish to have separate private keys for your CA cert and server cert
openssl req -new -x509 -key server.key -out server.crt -days 360
The longer version - First, generate a CA certificate
Deletions:
First, generate a CA certificate
Additions:
Generate a self-signed certificate
First, generate a CA certificate
openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 365 -key ca.key -out ca.crt
Then generate a server certificate and a CSR. Do not use the same common name as your CA.
openssl genrsa -des3 -out server.key 4096
openssl req -new -key server.key -out server.csr
Sign your CSR with your CA certificate
openssl x509 -req -days 365 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt
Remove the passphrase from your server private key
openssl rsa -in server.key -out server.key.insecure
mv server.key server.key.secure
mv server.key.insecure server.key
Examine your certificates and keys
openssl rsa -noout -text -in server.key
openssl req -noout -text -in server.csr
openssl rsa -noout -text -in ca.key
openssl x509 -noout -text -in ca.crt