Openssl Self Signed Certificate

• Nice instructions 201909 - https://deliciousbrains.com/ssl-certificate-authority-for-local-https-development/

Example 2019, create self signed certificate with keyUsage flags

• openssl req -out test.csr -newkey rsa:4096 -nodes -keyout test.key -config cert.cnf
• openssl x509 -req -days 365 -in test.csr -signkey test.key -sha256 -out test.crt
• cert.cnf

  • [ req ]
    default_bits       = 4096
    distinguished_name = req_distinguished_name
    
    x509_extensions = v3_req
    
    [ req_distinguished_name ]
    countryName                 = Country Name (2 letter code)
    countryName_default         = NZ
    stateOrProvinceName         = State or Province Name (full name)
    stateOrProvinceName_default = Auckland
    localityName                = Locality Name (eg, city)
    localityName_default        = Auckland
    organizationName            = Organization Name (eg, company)
    organizationName_default    = Infra&Networks
    commonName                  = Common Name (e.g. server FQDN or YOUR name)
    commonName_max              = 64
    commonName_default          = test.vigor,nz
    
    [v3_req]
    
    basicConstraints = CA:FALSE
    keyUsage = keyEncipherment, digitalSignature, nonRepudiation
    extendedKeyUsage = serverAuth, clientAuth
    
    subjectAltName = @alt_names
    
    [alt_names]
    DNS.1   = test1.vigor.nz