Skip to content

Commit c675339

Browse files
author
Tom De Nies
committed
Added example server and client certificates for HTTPS + scripts to generate them
1 parent 90893a1 commit c675339

13 files changed

+576
-80
lines changed

‎config/certs/localhost-ca.crt

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIDjTCCAnWgAwIBAgIJAL9s9cSRS193MA0GCSqGSIb3DQEBCwUAMF0xCzAJBgNV
3+
BAYTAkJFMQwwCgYDVQQIDANPVkwxDjAMBgNVBAcMBUdoZW50MRcwFQYDVQQKDA5N
4+
eU9yZ2FuaXphdGlvbjEXMBUGA1UEAwwObG9jYWxob3N0OjMwMDAwHhcNMTYwOTI5
5+
MTQ1NTEzWhcNMTcwOTI5MTQ1NTEzWjBdMQswCQYDVQQGEwJCRTEMMAoGA1UECAwD
6+
T1ZMMQ4wDAYDVQQHDAVHaGVudDEXMBUGA1UECgwOTXlPcmdhbml6YXRpb24xFzAV
7+
BgNVBAMMDmxvY2FsaG9zdDozMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
8+
CgKCAQEAzI1qGGI0WE4+WqlhzcgHx6/IqsJFaenOjFBV4Dxu4UIoQCO7Uu0FQuYv
9+
su+WtWOshGj5y2QxR6T0s0/SJrTHIbopbHxeKpZLTTOugKf8ZgqquLstY04xsib0
10+
jhxlzE0wGizIy3xyPSWNl+sTsKW0/gXrE+jBI0KV5C41mgBkTM79O49XChP1v7EF
11+
8pAsfOR8v44R8xsLyMAvXIIM33mV3oBwZFxK45ti0MbNw5ndTNz57Os3fC2TesVO
12+
x4oycfNiR6Ey/B+fpFOWMMEnpTZHxR3COEcS4H83AtWfxrQrXePXrcMT+3AbW9iP
13+
Xy94dh6FUovIGVOPPT0pluSaCTZFGQIDAQABo1AwTjAdBgNVHQ4EFgQUW1rGsQ6h
14+
TvrGvkV9Pm+rRIeVLy0wHwYDVR0jBBgwFoAUW1rGsQ6hTvrGvkV9Pm+rRIeVLy0w
15+
DAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAp6PRfoHctJwffDu5T+iW
16+
iuKMLzIkcbPXnQ5BhWskxeyIlxQ6nINT5OTeF/rn7lALjuiVx1138wSch7Z/f/w4
17+
yxb0PukuaWY1vjIIvSI3kYhweGkcm5uM/QYT7+APsuEXbaILJHZhQtPZGdPFqi4/
18+
z+RXfdz/hdAoUdreZF5ZGik0VrpBaFbqPe/LZZPvFfDc639TpIEUhx7wz7OR+EOV
19+
xZ9HVdlhDXcUDpwEt86HTa6nAxlS4i5v6KKYc5Wfh2KkiJOuINfmwBx3mFTuQPLV
20+
wczTsmjb2GWvGhan15RAPPL40x+LB8kAVNPl4I0n0fiVMJ/MdzMxySb7bsBf62ZZ
21+
2g==
22+
-----END CERTIFICATE-----

‎config/certs/localhost-ca.key

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
-----BEGIN RSA PRIVATE KEY-----
2+
MIIEowIBAAKCAQEAzI1qGGI0WE4+WqlhzcgHx6/IqsJFaenOjFBV4Dxu4UIoQCO7
3+
Uu0FQuYvsu+WtWOshGj5y2QxR6T0s0/SJrTHIbopbHxeKpZLTTOugKf8ZgqquLst
4+
Y04xsib0jhxlzE0wGizIy3xyPSWNl+sTsKW0/gXrE+jBI0KV5C41mgBkTM79O49X
5+
ChP1v7EF8pAsfOR8v44R8xsLyMAvXIIM33mV3oBwZFxK45ti0MbNw5ndTNz57Os3
6+
fC2TesVOx4oycfNiR6Ey/B+fpFOWMMEnpTZHxR3COEcS4H83AtWfxrQrXePXrcMT
7+
+3AbW9iPXy94dh6FUovIGVOPPT0pluSaCTZFGQIDAQABAoIBAFKeE2oB0C6Se7DW
8+
lQAueKX4o84EZVDf9GLL18OX5RjqRaOSSwi1XtikbEOTbYWZ2oYoeCvkLdtIDuWV
9+
qcWkYoGG1VBR8x60UXm/FA42y0TTrhyqzSw82umfvkrfwWYBDxqjV/6IJwP3dPcV
10+
JYDFjRLEhSwnaEq7jBr7Zv7qhZhXkRWutyCHP1i+Sgneg5EdSLSuiGqKJoOUfcnZ
11+
ZqKppTVvkZbTUv8OqGq2wpheXEHN3HFojb5Igt5LCcxWuUyLHzXadA+/j/4C6Kj9
12+
EfNON/4CKotJeFArf8UkoRVgJ+aFYkOYNkhcJ5ZpFyH2PptthP7zRRQuAWvx55tE
13+
Psrc/FkCgYEA66GQstopInpxY3qM+ioRQcP4VDvhWmtror8hcQMK3d3Zptz4ZQh6
14+
plMkk4SGkqh8aQQIUCFu73Euaa4RIzs8Vmv18JwFHZUYX6jayAdli+o4Ltpn4Nsu
15+
x5NNIL9kV4MJFPSj4xNt3s93+DDLCIUWEwjaxFOxeFdEmZwm6h2Q9GsCgYEA3jwW
16+
ioHoPAy7nQ0jlOW0ejHjGd+CuHJToH7mtO2z6J6YmWGV+kwmfHQMNmzKygzxRBtr
17+
RxK6wtevsPoh+3jS+r/vU69kiO4livF0klRK1Nf0ha1ooPlD+q1eJyekCHrOS99W
18+
m+KMxOOlEWWy8Y9QDICVVcpIxNjm3kRmMyZQbYsCgYEAukjNANkA1EVBB4iHk+9W
19+
HUw1M0Lz8mwieFPquFHTcXxG6mif6CA/9uaccBPB4IhbcxrBB7im3533N41p9xSJ
20+
qzlHAqYWVUDeOCJidOmEGo1dRY1duqMN5LJLs6wcRCNQNsUCHC/sGM6k5g6NNXsh
21+
7IJ/kd8o2x8DGP4etdASHWkCgYB+85h02y0NUMDEQMM4xdfJjkILf7EvKLA5GQU2
22+
CiwiEKdfx21jpKi/o5Nua8uUjLwuifNIkJx7vbaxxNIw057Ce25+Qc2Oo2xy6OgM
23+
x3ZQDGW1D5CblImO5AbLG0wLRAwhL55MQqjjuJ+NRqlocNPrsHCep4XWXYnVIwG2
24+
6oY7bQKBgFy3V0V5q54WZLwDdcL0LkA5HyiE3x2irrRL34reuaDDfuBD05b7qLUW
25+
Tz130mnSAafwVW6rRsgBS+kRZZ6R34N1zTBbOcoBO7mFR9IZvv6NR6zQXi7RHV5d
26+
LZyrHUgtODAj6Z7EUTNtOqKgRPbvVgIjbnCxeN8tWUjZOiYAncNG
27+
-----END RSA PRIVATE KEY-----

‎config/certs/localhost-client.crt

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIDojCCAooCCQC9G8WUIjCRPjANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJC
3+
RTEMMAoGA1UECAwDT1ZMMQ4wDAYDVQQHDAVHaGVudDEXMBUGA1UECgwOTXlPcmdh
4+
bml6YXRpb24xFzAVBgNVBAMMDmxvY2FsaG9zdDozMDAwMB4XDTE2MDkzMDA3MTQy
5+
NFoXDTE3MDkzMDA3MTQyNFowgcgxCzAJBgNVBAYTAkJFMQ0wCwYDVQQIDARPLVZM
6+
MQ4wDAYDVQQHDAVHaGVudDEXMBUGA1UECgwOTXlPcmdhbml6YXRpb24xEjAQBgNV
7+
BAMMCWxvY2FsaG9zdDFtMGsGA1UdEQxkdW5pZm9ybVJlc291cmNlSWRlbnRpZmll
8+
cjpodHRwczovL2FyY2hpdmUub3JnL3NlcnZpY2VzL3B1cmwvcHVybC9saW5rZWRk
9+
YXRhZnJhZ21lbnRzL3dlYmlkLnR0bCN3ZWJpZDCCASIwDQYJKoZIhvcNAQEBBQAD
10+
ggEPADCCAQoCggEBALrOwN55i0+bLgy8saUT83ZhjpL/z1v6zvC0W2mgpJrA5+iX
11+
36gLOW+prIL0HN6/YE/Nj5iUEfnDQJ58nuNhyV+BaOKbVQ9l1SYpOJyl9r4IQcme
12+
psxg6i1elbLk+g4a+9+QhaWA43T5L1b6MmDjxuk7PYY45vckqj93P5TnzYzaK0Mm
13+
7PcnYou5/vdUnBmxNsnqwds6obR+k/d6heOb2ZCQGP3H4BUVB9HoPXEA8/lFf9zH
14+
UH3e802SNatU1Emlvrq2B03hMF6pLb/sB9jhb4Dpdi2tG+2tbInRSTWr4IA66N0K
15+
LXIeUjCOBCrFaQxm9tcihPLSdhVWadKO1/KLVN0CAwEAATANBgkqhkiG9w0BAQsF
16+
AAOCAQEArPldoZVI1RWAS7MJknBlpNFLUWjHzw3dGBGObguVmy6y2nBQ2Xqouzu0
17+
a+eDqDUKaK90Nd/OQay2JcEYO7QDA21TC325wwU+qdxrEZGo+xFhQ8R5Q9P8p2Ja
18+
SIoVf/9WyJCM/j5tkqM0xU1Ku5n1t4Ow+oaTmhvjfudPoTU8lOGEHVuNi4UyLZVT
19+
DkokCcgLEK6qQqMLrV0YvBZ/lNps2sCGFZJNyt88O2W//rpzzBHIVpbldfUGQYVg
20+
5OawsHOoXNhl3FWJWWCtSr+PTzQXGXHjxQcbLPc4nUX+jkzTIDjcIY0J47mvFnUb
21+
jEHZKwoIslKYuSzC+PZRXsW8U8uAWQ==
22+
-----END CERTIFICATE-----

‎config/certs/localhost-client.key

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
-----BEGIN RSA PRIVATE KEY-----
2+
MIIEowIBAAKCAQEAus7A3nmLT5suDLyxpRPzdmGOkv/PW/rO8LRbaaCkmsDn6Jff
3+
qAs5b6msgvQc3r9gT82PmJQR+cNAnnye42HJX4Fo4ptVD2XVJik4nKX2vghByZ6m
4+
zGDqLV6VsuT6Dhr735CFpYDjdPkvVvoyYOPG6Ts9hjjm9ySqP3c/lOfNjNorQybs
5+
9ydii7n+91ScGbE2yerB2zqhtH6T93qF45vZkJAY/cfgFRUH0eg9cQDz+UV/3MdQ
6+
fd7zTZI1q1TUSaW+urYHTeEwXqktv+wH2OFvgOl2La0b7a1sidFJNavggDro3Qot
7+
ch5SMI4EKsVpDGb21yKE8tJ2FVZp0o7X8otU3QIDAQABAoIBAFqeFsMU9LYuEZ2O
8+
HyJz1iMz2cSHIOB+fsoWw00u5wpGz3hty8mpgDghd5SitCp9bUvo7GJYWYvt4je/
9+
PhgRBG02ylk6fn2UqVv0nQioHVQ7jyYttr3nuVE+06FPH9mdz1a4tYv+RNgmVId9
10+
oNiNRZ035nVovuleONPGleo2s+hByysUQELHqzNY/4xfkod7X6enmWB8X9mvf5Yn
11+
Xp5m5OJ4yV1WtZBHRK8cB2mz501fmXWhMAO3Yl1CtskC35XIDv9TA5zW2D74iOj2
12+
uu1rditS18T1jgznMn7GHqATrvCkNTohQ2jEhBTnecHVsz8abv6QsxVuLX50A07A
13+
qADf9aUCgYEA9X7geTyV3x6/SxCGV2p/Dy76h0jfgO65p4cQYaw7PtY+XfUuNx7c
14+
i8UhziGX81/tUH2pCHzst7bQmHhadxo/8lr5mpf1nwJKKnXFUSt9Jld9kBZ5eXD1
15+
p9oRupU4RjOAMWfmCD2UriHG5csWvUoL+b/lAUJdiRkPdmJfo8zyG5cCgYEAws0E
16+
Vmi24KiTL/9Cr3goP7j253XPwEMAF4Pm+X/IOx3Nu9qcfLyvq9roYV2B+TA6CZhR
17+
llLxTEr29D3oeXHJPdkYuVcdApLfc+KS2D1DqPUKDQz46DX9a4dHbvI/US33npSV
18+
Jq24xA4rXCzHNu8KtifOk5/Tdrpg8lY/TYQtMasCgYAOAJCZGaWKtlw+0dB3x/E7
19+
UnijorpsxjD8py1+BK7UZK/l+AgMyMvXhQTqluvty7jjcGdlvopZ6Cl5qNOwG2Uu
20+
U5YNBUHTMfQ8+76nZI2c1DyrLTz8ej7otf1w4PX2uxVCvCRYr/p8/Bw2GyFO5pxM
21+
QG+1ZK2lFjLVk8LUuunMPQKBgEMLhN6ok6im3GG8nRr/Y/rqki//oE0vwixVvX1J
22+
uYR/MXviNdHIrz2azjgUktNNAeyjfBEc4ue7NVvCouyJeRXMTnIbxWRJYJbl+Fxs
23+
WYkhLSBowpJJYrtLiA5rWdd61qrBwMPbLqhrqAjFcJs7kpg3AyZT79gBNbSycn8f
24+
at6ZAoGBAMFvTUmlOsIzvBsf4LFyNduxr4ZJe7SdnPdT6CEbt2u0fQDGH1Gvk7T2
25+
zUbG7RtCjfH39MwZzRjzJb/PkzTQz8L72AZ0xvPjesHyTF0tq3iZV3dPu4SECr5T
26+
1O9JWhjE0iz8u9jbrWHB9JzznA0MOZtwcV1SipphPj2AT7U4dN5O
27+
-----END RSA PRIVATE KEY-----

‎config/certs/localhost-client.p12

2.47 KB
Binary file not shown.

‎config/certs/localhost-server.crt

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIIDNjCCAh4CCQDs9KYvylwZEzANBgkqhkiG9w0BAQsFADBdMQswCQYDVQQGEwJC
3+
RTEMMAoGA1UECAwDT1ZMMQ4wDAYDVQQHDAVHaGVudDEXMBUGA1UECgwOTXlPcmdh
4+
bml6YXRpb24xFzAVBgNVBAMMDmxvY2FsaG9zdDozMDAwMB4XDTE2MDkyOTE0NTUx
5+
M1oXDTE3MDkyOTE0NTUxM1owXTELMAkGA1UEBhMCQkUxDDAKBgNVBAgMA09WTDEO
6+
MAwGA1UEBwwFR2hlbnQxFzAVBgNVBAoMDk15T3JnYW5pemF0aW9uMRcwFQYDVQQD
7+
DA5sb2NhbGhvc3Q6MzAwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
8+
APavigw5p5VtkChRnXyN9QMbs+LOlvGjbIb85PaIrxEylkAdyQr3rIjCTvs6r32p
9+
ptqt5/s+in5eRxYxRKGjb7X8hUrEIjyKJy/06NoPiEVG5Epj3dg1fEEfzRSS+/ey
10+
iJqATSvTpxWlj9Il9ViCGaopr0+pm/8lYi8jdaNNcXS3cJ2EhfoC1UGjWeY6oYrd
11+
uyMxF7XENx5ynjqPvQYdNeXc7S0rcnAktKZ5LdpOqtOvaH87ltJNH5w0wBmsfNqf
12+
ayqSQIq/5jLBfMoo287CCiq6YjR1pj5qXg/9h5W4xMCCZ+41HPStawheXFn3zx38
13+
d3mG7v1N0PqiVBlCLZGg0Z0CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAby+ooPE2
14+
Sec1/pNjx8rzE+8iwID+mcRAtQsnNmze6rf6HrGVxJHwWbYlsnIdEi15hY8hnOtA
15+
ICiKavw0/WYaYvFaZe5o4XBHEA4/AGviE14Pq8A931PLaZYFGPg1initTqRDKuZY
16+
zMXv6XvVAv3vT+iquiWwbizXg4nrUPu+98cByJqTMzm9qF3L12DoLkaBcD29TwCZ
17+
exlyei9QUfB2nnZfqWhTUIWgfv8wEVD2FMshq3VUdbiM4lUM6PSKHrqTALQmY4as
18+
/ttPpFm8/xuYl+QwpsCxK+3sERBx9kzaFeHXaHxvsDGbIvwAQJJfW4gQoxbhguHX
19+
vK4R6NdG25ag2w==
20+
-----END CERTIFICATE-----

‎config/certs/localhost-server.key

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
-----BEGIN RSA PRIVATE KEY-----
2+
MIIEowIBAAKCAQEA9q+KDDmnlW2QKFGdfI31Axuz4s6W8aNshvzk9oivETKWQB3J
3+
CvesiMJO+zqvfamm2q3n+z6Kfl5HFjFEoaNvtfyFSsQiPIonL/To2g+IRUbkSmPd
4+
2DV8QR/NFJL797KImoBNK9OnFaWP0iX1WIIZqimvT6mb/yViLyN1o01xdLdwnYSF
5+
+gLVQaNZ5jqhit27IzEXtcQ3HnKeOo+9Bh015dztLStycCS0pnkt2k6q069ofzuW
6+
0k0fnDTAGax82p9rKpJAir/mMsF8yijbzsIKKrpiNHWmPmpeD/2HlbjEwIJn7jUc
7+
9K1rCF5cWffPHfx3eYbu/U3Q+qJUGUItkaDRnQIDAQABAoIBAAQ9A9wt6Wkx1rY6
8+
oMARGFKTWUXeUs2YBzdShQSPWKKtAdPcLyYXF0nKPN0oJve7wHglYMT6UBrXt9Tz
9+
x8AXNMYlroyYThZIMWArjwygE7FNBIMasCcU1CuyRi3CUL3yvVIaPjkwi8Bdddkg
10+
edSpd5Nq3+44dcuucr9olo7Vt8tPiub4OsPVQwg9lkYKb6iypvys4syLRQ0w9IIu
11+
/LO19tcKmdqe1PUTybaNoVf+M5IRGKBILiOeJLR1lvhq/PeGW9QnolDjxyto1zMv
12+
S2d6lDfZsAednGuinYGC0T7rKcj69STArTYClHF6M0nFB5RcTnP8xYB2wWh0R2a4
13+
bnvBx6kCgYEA/miTrI+mtgMA7HQiXLnp0b9u3Gcr1CYwIfPINx2c+ejtXsDJMaBq
14+
sJ67Q32JPpNzG43s0Z8wSOxqZaVmnbZ43HMwKdxqSLt1zPsYLCf5c+YavTxUd90n
15+
k7GiKlts3nRR15t9t1PC8u0gaja3qDFXxm9r3vh+dZCUZT9Ka5g4XBsCgYEA+DqY
16+
PeQ3GBUdiUR2dh8Xc1GZbXRR/70lc9U3omVk06GqsSh5/nHjNuE9tigg6w2cings
17+
HenXMfIcVIqQIPUDsShFyivP6vNtprV9OilJyuqc8YS3OetBnySJHhVfSsFV0lJN
18+
dWMfkRovrQdw9CLHhN24gd6OXPVEE3SbLbJp9KcCgYB1h1JRcbuOcizHD4+gTrLa
19+
Fxnb8D2rMEkkJj7kV2Xhfd3K3D0WFAm1tl7EewYgRnXy0MoKvQPNbIpqktKpIVcM
20+
YJprfEwNdayiGY29OGphRHgt2+UZyq0x6eoEr1/IFOyKMmcNfkCdgTZsWwLVTJZE
21+
Mc0foKSrIzOq4mY69oNy6QKBgQDtOdJVE80zTrqzfKJZsM0QgGNIn2neJj2svZA1
22+
uwDo4A/ozu4HpX+n6wq3ExKikJeSHdbLn7bxHJjGksW7OW0V2Y8Y71X9DDc2oyvS
23+
cbL8IctrZZJV3+cO2DPSdEplfu8t2Un9bYW1fnkhu4LPTo2vBNZYBwG3BQ7SKRZE
24+
TcXE8QKBgBstWrpDNzQg2fC14BHpYR6h50AufG7dXk/bUh+vPIw/firie94ZQmte
25+
2tqzm3MVs4PRU/otLs74FPIDAEl7Ve4hAib6FEIZfEwOGgUIIudpFShPRRac7RcP
26+
OsgRRODXwxM51CH+ahkETi+b0YaY90OON1IgeB4AH89PbD5/e3Lq
27+
-----END RSA PRIVATE KEY-----

‎config/certs/make-client-certificates.sh

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,35 @@
1+
#!/bin/bash
2+
3+
# Generate server and ca certificates first!
4+
# This will generate the following keys and certificates in the current directory:
5+
# localhost-client.key
6+
# localhost-client.crt
7+
# localhost-client.p12
8+
9+
# Create a client key
10+
openssl genrsa -out localhost-client.key 2048
11+
12+
# Create a client certificate request
13+
# NOTE: You MUST match CN to the domain name or ip address you want to use
14+
openssl req -new -key localhost-client.key -out localhost-client.csr -subj "/C=BE/ST=O-VL/L=Ghent/O=MyOrganization/CN=localhost/subjectAltName=uniformResourceIdentifier:https:\/\/archive.org\/services\/purl\/purl\/linkeddatafragments\/webid.ttl#webid" -config webid.cnf
15+
16+
# Sign the request from client with your CA
17+
openssl x509 -req -in localhost-client.csr -CA localhost-ca.crt -CAkey localhost-ca.key -CAcreateserial -out localhost-client.crt -days 365
18+
19+
# Decode public key to extract exponent and modulus
20+
echo ""
21+
echo "Add the following modulus to your webid:"
22+
openssl rsa -in localhost-client.key -modulus -noout
23+
echo "Add the following exponent to your webid:"
24+
openssl rsa -in localhost-client.key -text -noout | awk '/Exponent/ { print $2 }'
25+
26+
# Generate a PK12, which you need for access in the browser
27+
echo ""
28+
echo "You must create a p12 passphrase. Consider using 'secret' for testing and demo purposes."
29+
openssl pkcs12 -export -in localhost-client.crt -inkey localhost-client.key -out localhost-client.p12
30+
31+
# CLEANUP
32+
# Delete the csr (we can always regenerate it using the key)
33+
rm localhost-client.csr
34+
# Delete the srl
35+
rm localhost-ca.srl

‎config/certs/make-server-certificates.sh

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
#!/bin/bash
2+
3+
# This will generate the following keys and certificates in the current directory:
4+
# localhost-ca.key & localhost-ca.crt
5+
# localhost-server.key & localhost-server.crt
6+
7+
# Create a key for your own Certificate Authority
8+
openssl genrsa -out localhost-ca.key 2048
9+
10+
# Self-sign your Certificate Authority
11+
openssl req -x509 -new -nodes -key localhost-ca.key -days 365 -out localhost-ca.crt -subj "/C=BE/ST=OVL/L=Ghent/O=MyOrganization/CN=localhost:3000" -config ./webid.cnf
12+
13+
# Create a server certificate
14+
# NOTE: You MUST match CN to the domain name or ip address you want to use
15+
openssl genrsa -out localhost-server.key 2048
16+
17+
# Create a certificate request for the server, which your CA will sign
18+
openssl req -new -key localhost-server.key -out localhost-server.csr -subj "/C=BE/ST=OVL/L=Ghent/O=MyOrganization/CN=localhost:3000" -config ./webid.cnf
19+
20+
# Sign the request with your CA
21+
openssl x509 -req -in localhost-server.csr -CA localhost-ca.crt -CAkey localhost-ca.key -CAcreateserial -out localhost-server.crt -days 365
22+
23+
# CLEANUP
24+
# Delete the csr (we can always regenerate it using the key)
25+
rm localhost-server.csr
26+
# Delete the srl
27+
rm localhost-ca.srl

0 commit comments

Comments
 (0)