Creating a self-signed SSL certificate: Difference between revisions

Revision as of 19:36, 13 June 2015

$ openssl req -new -x509 -sha256 -days 10000 -nodes -out server.crt -keyout server.key
Set the Common Name (CN) to the FQDN and enter "." for everything else.

Put files server.crt and server.key to /etc/httpd/ (on Slackware) and set their permissions to 400.

@@ Line 1: / Line 1: @@
-*Without CA
+#Without CA
-**<code>$ openssl req -new -x509 -sha256 -days 10000 -nodes -out server.crt -keyout server.key</code>
+*<code>$ openssl req -new -x509 -sha256 -days 10000 -nodes -out server.crt -keyout server.key</code>
-**Set the Common Name (CN) to the FQDN and enter "." for everything else.
+*Set the Common Name (CN) to the FQDN and enter "." for everything else.
-**Put files <code>server.crt</code> and <code>server.key</code> to <code>/etc/httpd/</code> (on Slackware) and set their permissions to 600.
+#Put files <code>server.crt</code> and <code>server.key</code> to <code>/etc/httpd/</code> (on Slackware) and set their permissions to 400.
 [[Category: Linux]]