Showing posts with label certificate. Show all posts
Showing posts with label certificate. Show all posts

How to Create Root Certificate Authority (CA) and Self Signed Certificate

Tags: June 18, 2016 9:47 AM
0 comments

Goal

Make client application such as web browser to trust our self signed certificate, so we can use any custom domain in development or internal network.

Generate Root CA

The first is to generate private key for our Certificate Authority (CA). Command below will generate RSA based private key 2048 bits key size.

$ mkdir self-root-ca && cd self-root-ca
$ openssl genrsa -out myRootCA.key
Generating RSA private key, 2048 bit long modulus
.................+++
................+++
e is 65537 (0x10001)
$ chmod 0600 myRootCA.key

Command above will produce a file called myRootCA.key. The chmod command will make sure that only super user and the creator of the key able to read the file.

Share on Facebook Twitter

Memasang RapidSSL Certificate pada Nginx

Tags: April 28, 2012 5:37 PM
0 comments

Setelah menggenerate CSR, langkah berikutnya adalah menggabungkan server certificate dan intermediate certificate. Dua-duanya diperoleh setelah proser approval dari CSR. Berikut langkahnya.

Menggabungkan Certificate

Untuk lebih memudahkan, lokasi ssl certificate biasanya dikumpulkan pada direktori /etc/ssl

Share on Facebook Twitter

Generate 2048 bit key CSR OpenSSL

Tags: 4:40 PM
0 comments

Pihak issuer SSL certificate saat ini umumnya meminta Certificate Signing Request (CSR) 2048 bit karena key dengan 1024 sudah dapat "dicrack" dengan kemampuan mesin komputer terbaru. Selain itu dalam proses pembuatan CSR anda diminta untuk tidak memasukkan alamat email dan challenge password.

Share on Facebook Twitter