Wednesday, January 28, 2009

5 steps to create a self-signed SSL Certificate

5 steps to create a self-signed SSL Certificate


Step 1: Generate a Private Key

Command:

openssl genrsa -des3 -out server.key 1024

Step 2: Generate a CSR

Command:

openssl req -new -key server.key -out server.csr

Step 3: Generating a Self-Signed Certificate

Command:

openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

Step 4: Installing the Private Key and Certificate

Command:

cp server.crt /usr/local/apache/conf/ssl.crt
cp server.key /usr/local/apache/conf/ssl.key

Step 5: Configuring SSL Enabled Virtual Hosts

Command: (Change this in the configuration file of apache)

SSLEngine on
SSLCertificateFile /usr/local/apache/conf/ssl.crt/server.crt
SSLCertificateKeyFile /usr/local/apache/conf/ssl.key/server.key

No comments: