# openssl req -x509 -newkey rsa:1024 -keyout /etc/httpd/conf/ssl.key/server.key -out /etc/httpd/conf/ssl.crt/server.crt -days 9999 -nodes
# chown root:root /etc/httpd/conf/ssl.key/server.key
# chmod 400 /etc/httpd/conf/ssl.key/server.keyGenerating Apache SSL Self-Signed Certificate
Submitted by sandip on Thu, 07/26/2007 - 21:59.
| Tags:












CSR info
openssl req -text -noout -in /path/to/server.csrSSL certificate information
Full text information:
Issuer of the certificate:
Issued to:
Valid dates:
All of the above:
Hash value:
MD5 fingerprint:
# openssl x509 -text -in server.crt# openssl x509 -noout -in server.crt -issuer# openssl x509 -noout -in server.crt -subject# openssl x509 -noout -in server.crt -dates# openssl x509 -noout -in server.crt -issuer -subject -dates# openssl x509 -noout -in server.crt -hash# openssl x509 -noout -in server.crt -fingerprintRenewing self signed SSL certificate
After generating a renewed self-signed ssl cert, I got the below message:
With some digging, found that a new serial number can be set as below.
# openssl req -x509 -new -key /etc/httpd/conf/ssl.key/server.key \-out /etc/httpd/conf/ssl.crt/server.crt -days 9999 -nodes -set_serial 99999
man x509 for more info.
Post new comment