Self-Signed Certficate Creation :: Fast Tracks

Blog Post created by Patrick-Dussault Employee on Oct 28, 2016

To create quickly a Certificate to configure Apache or SPS with ssl :


#  mkdir certificate
#  cd certificate/
#  openssl genrsa -des3 -out server.key 1024
#  openssl req -config /etc/ssl/openssl.cnf -new -key server.key -out server.csr

here's a sample of the configuration  :


Country Name (2 letter code) [AU]:ES
State or Province Name (full name) [Some-State]:Barcelona
Locality Name (eg, city) []:Barcelona
Organization Name (eg, company) [Internet Widgits Pty Ltd]:CA
Organizational Unit Name (eg, section) []:Support
Common Name (e.g. server FQDN or YOUR name) []
Email Address []:


Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:


#  openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 365
       give the password you give when creating the server.key


Then use the server.key along with the server.crt to configure ssl for your server.