3
Create Selfsigned Certificate
Benjamin Kraft edited this page 2 years ago
openssl.cnf
[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req
[req_distinguished_name]
countryName = DE
countryName_default = DE
stateOrProvinceName = RLP
stateOrProvinceName_default = RLP
localityName = Mainz
localityName_default = Mainz
organizationalUnitName = BenjaminKraftGames
organizationalUnitName_default = BenjaminKraftGames
commonName = benjamin-kraft.local
commonName_max = 64
[ v3_req ]
# Extensions to add to a certificate request
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
subjectAltName = @alt_names
[alt_names]
DNS.1 = play.benjamin-kraft.local
DNS.2 = pma.localhost
openssl genrsa -out server.key 2048
openssl req -new -out server.csr -key server.key -config openssl.cnf
openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt -extensions v3_req -extfile openssl.cnf
mv server.crt cert.pem
mv server.key key.pem
rm server.csr
sudo cp cert.pem /usr/share/ca-certificates/benjamin-kraft.local.crt
sudo dpkg-reconfigure ca-certificates