How to manually create a new self-signed shared server certificate

The following command will create you a new self-signed shared server certificate

/usr/bin/openssl req -x509 -newkey rsa:1024 -keyout /etc/httpd/conf/ssl.key/server.key -out /etc/httpd/conf/ssl.crt/server.crt -days 9999 -nodes

answer the questions as desired.

Note, you can also accomplish the same thing through DirectAdmin. To do this, login as “admin”. Click “User Level”. Use a domain created under “admin”, if you don't have one, create a fake domain, it doesn't matter. Go to “SSL Certificates”. Assuming “admin” is still set to use the server IP, and self-signed certificate created there will write to the same server.crt and server.key files as above.

Also, if you create a certificate request in this same manor (through DA), be advised that it will generate the key and the csr (cert request) as the result. The key is *not* saved during this process (only for “admin” on the server IP). So make sure you copy the key and csr and save it somewhere safe. The original cert/key in the textarea are not touched when creating a csr.

 
config/shared_server.txt · Last modified: 2010/04/29 09:14 by admin
 
Except where otherwise noted, content on this wiki is licensed under the following license:CC Attribution-Noncommercial-Share Alike 3.0 Unported
Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki