ssl | Side Channel

ssl

angch's picture

Self Signed Cert, cheat sheet.

angch — Thu, 21/05/2009 - 13:01

No encrypting ofs erver.key in the first place, so we have one less step. Commands:

openssl genrsa -out server.key 4096
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
cat server.crt server.key > $myserver.pem

Apache config:

SSLEngine on
SSLCertificateFile $myserver.pem
SSLCertificateKeyFile $myserver.pem

nginx config:

ssl  on;
ssl_certificate $myserver.pem;
ssl_certificate_key $myserver.pem;