Skip to content

Instantly share code, notes, and snippets.

@ningthoujam-lokhendro

ningthoujam-lokhendro/self-sign.md

Last active December 23, 2019 12:27
Show Gist options
  • Save ningthoujam-lokhendro/4d6bb730ab55ed72b9b08a6a71b02f29 to your computer and use it in GitHub Desktop.
Save ningthoujam-lokhendro/4d6bb730ab55ed72b9b08a6a71b02f29 to your computer and use it in GitHub Desktop.
Download ZIP
Generate Self-Sign Cert and Key. Trust in other system
Raw
self-sign.md

Generate Self-sign cert and key

openssl req \
    -newkey rsa:2048 \
    -x509 \
    -nodes \
    -keyout server.key \
    -new \
    -out server.pem \
    -subj /CN=ningzeta.com \
    -reqexts SAN \
    -extensions SAN \
    -config <(cat /etc/pki/tls/openssl.cnf \
        <(printf '[SAN]\nsubjectAltName=DNS:*.ningzeta.com,IP:192.168.0.1,IP:192.168.0.2,IP:192.168.0.3')) \
    -sha256 \
    -days 3650

Convert to pkcs

openssl pkcs12 -inkey server.key -in server.pem -export -out server.pfx

To trust in other system(rhel)

Get the cert

openssl s_client -connect my-server.example.com:443 <<<'' | openssl x509 -out my-server.example.com.crt

Add to root trust

cp my-server.crt /etc/pki/ca-trust/source/anchors/
update-ca-trust enable
update-ca-trust extract
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment