You can find many instructions how to make certificates with OpenSSL. OpenSSL is very good except... it's too complex.
Showcert is OpenSSL for humans, much simpler to use and it has gencert utility to generate certificates. Very easy.
Generate self-signed cert with simple command
gencert example.com www.example.com
This will make self-signed cert. Easy, isn't it?
Your own CA
Generate CA certificate (1 command):
gencert --ca MyCA
Thats all! Now, you can import generated MyCA.pem file to browsers and generate signed certificates for sites:
gencert --cacert MyCA.pem --cakey MyCA.key example.com
What could be simpler?
Install showcert and play for yourself.
Top comments (0)