Self Signed Cert, cheat sheet.

angch's picture

No encrypting ofs erver.key in the first place, so we have one less step. Commands:

openssl genrsa -out server.key 4096
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
cat server.crt server.key > $myserver.pem
Apache config:
SSLEngine on
SSLCertificateFile $myserver.pem
SSLCertificateKeyFile $myserver.pem
nginx config:
ssl  on;
ssl_certificate $myserver.pem;
ssl_certificate_key $myserver.pem;