how_to:create_an_ssl_certificate
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| how_to:create_an_ssl_certificate [2026/03/23 10:09] – [Generating a CSR using OpenSSL] paul | how_to:create_an_ssl_certificate [2026/03/23 10:18] (current) – [Using OpenSSL] paul | ||
|---|---|---|---|
| Line 12: | Line 12: | ||
| Once you have generated the CSR you need to send it to a Certificate Authority. This is typically someone like GeoTrust, Sectigo etc. They will charge you (typically somewhere betwee £50 to £400 per year) to sign the certificate, | Once you have generated the CSR you need to send it to a Certificate Authority. This is typically someone like GeoTrust, Sectigo etc. They will charge you (typically somewhere betwee £50 to £400 per year) to sign the certificate, | ||
| - | You can also set up as your own CA. The Windows Server Certificate Server can do this for you, or you can use OpenSSL - see below. This is free, but when you access a service using a certificate | + | You can also generate self-signed certificates. The Windows Server Certificate Server can do this for you, or you can use OpenSSL - see below. This is free, but when you access a service using a self-signed |
| Note that the ' | Note that the ' | ||
| Line 44: | Line 44: | ||
| If you are using Linux, then OpenSSL is usually installed as standard | If you are using Linux, then OpenSSL is usually installed as standard | ||
| - | OpenSSL has to be used from a command prompt. The following sections give examples of how to perform common tasks using OpenSSL | + | OpenSSL has to be used from a command prompt. The following sections give examples of how to perform |
| ====Generating a CSR using OpenSSL==== | ====Generating a CSR using OpenSSL==== | ||
| - | Run: | + | See the 'Using OpenSSL' |
| + | |||
| + | Then run: | ||
| openssl req -newkey rsa:2048 -nodes -keyout key.pem -out csr.pem | openssl req -newkey rsa:2048 -nodes -keyout key.pem -out csr.pem | ||
| Line 68: | Line 70: | ||
| ====Generating a self-signed certificate using OpenSSL==== | ====Generating a self-signed certificate using OpenSSL==== | ||
| - | openssl req -x509 -newkey rsa:4096 -nodes -keyout key.pem -out cert.pem -sha256 -days 365 | + | See the 'Using OpenSSL' |
| + | |||
| + | Then, run: | ||
| + | |||
| + | | ||
| This will generate a private key and self-signed certificate with an expiry of 365 days | This will generate a private key and self-signed certificate with an expiry of 365 days | ||
how_to/create_an_ssl_certificate.1774260564.txt.gz · Last modified: by paul
Page Tools
