generate ssl certificate nginx

The code is as follows Copy Code OpenSSL x509-req-days 3650-in hupohost.csr-signkey hupohost.key-out hupohost.crt Here 3650 is the certificate validity period recommendation 3650 haha. This is random. The last file to use is key and CRT files.If you need to use a PFX you can use the following command to generate The code is as follows Copy Code

1. Download let ' s encrypt2. Generate the key, call before you need to stop NginxCertbot certonly--standalone-d www. domain name 1.com-d www. domain name 2.comThe build succeeds with the following promptsIMPORTANT NOTES:-congratulations! Your certificate and chain has been saved at/etc/letsencrypt/live/"Here is your domain name"/FULLCHAIN.PEM. Your cert would expire on "here is the expiry time". To obt

Create a server private key, and the command will let you enter a password: $ OpenSSL genrsa-des3-out server.key 1024 Create a certificate (CSR) for the signing request: $ OpenSSL req-new-key server.key-out SERVER.CSR Remove the required password when loading SSL-supported Nginx and using the above private key: $ CP Server.key

Original address: http://www.lamppr.com/node/648 Generate a certificate using OpenSSL 1. How to generate RSA keys OpenSSL genrsa-des3-out Privkey.pem 2048 This command generates a 2048-bit key with a password that is encrypted by the Des3 method, and if you do not want to enter the password every time, you can change it to: OpenSSL genrsa-out Privkey.pem 20

following page is displayed: To create a root certificate, select a self-authenticated certificate with serial number 1, select SHA 256 as the signature algorithm, select the default CA as the certificate template, and then click Apply all (this cannot be missed) as follows: Switch to the Subject Page and fill in all fields. Click

certificate compression package we obtained has 3 files, namely CERTIFICATE.CRT, CA_BUNDLE.CRT, and Private.key. Because Chiang is ready to deploy the site is Nginx environment set up, here I only use Nginx deployment process records, in fact, if we use what environment is not important, such as the virtual host Cpanel panel deployment is also very simple, after

With Xca (X Certificate and Key Management) Visual Project Manager SSL Certificate series articles (2) and (3). We learned how to generate a certificate with XCA (X Certificate and Key Management), how you have generated your own

documentscacert.pemIt should be generated in/etc/pki/CA.1.4 generate an ssl Key for our nginx web Server All the preceding operations are performed on the CA server and only need to be performed once. Now, the operation is transferred to the nginx server for execution: 12 # cd /etc/

, and other files. Req:this subcommand Specifies that we want to use the certificate signing request (CSR) management. The "infrastructure" is a public key, which is SSL and TLS adheres-to-its key and certificate management. We want to create a new-cert, so we is using this subcommand. -x509:this further modifies the previous subcommand by telling the utility