locatrust

Own Certificate Authority (CA) with multi-domain SSL certificates generation recipe (localhost development).

root key (with passphrase)

$ openssl genrsa -des3 -out rootCA.key 4096

root Certificate Authority (to be imported to the browser)

$ openssl req -x509 -new -nodes -key rootCA.key -sha256 -days 3650 -out rootCA.crt

server key

$ openssl genrsa -out ssl.key 4096

server Certificate Signing Request

$ openssl req -new -key ssl.key -out ssl.csr -config ssl.cnf

server Certificate signed by root CA

$ openssl x509 -req -in ssl.csr \
    -CA rootCA.crt -CAkey rootCA.key -CAcreateserial \
    -days 3650 -sha256 -out ssl.cert -extfile ssl.cnf -extensions v3_req

server Certificate signed by root CA (subsequent calls)

$ openssl x509 -req -in ssl.csr \
    -CA rootCA.crt -CAkey rootCA.key -CAserial \
    -days 3650 -sha256 -out ssl.cert -extfile ssl.cnf -extensions v3_req

support

If you've found this useful, you can buy me a 🍺️ or 🍕️ via the stellar network:

• Payment address: xcmats*keybase.io
• Stellar account ID: GBYUN4PMACWBJ2CXVX2KID3WQOONPKZX2UL4J6ODMIRFCYOB3Z3C44UZ

license

locatrust is released under the Apache License, Version 2.0. See the LICENSE for more details.