These are tool to create youw own ca and own certs and csr that can be use to get real live certs)
make sure openssl is install
Do note that the values can either be real or private. To make CSR for real life cert you should use correct information. Using real values is does not hurt for usage in a private enviroment:
edit the file env with your favorite editor and set the value example:
_my_country="US"
_my_state="Momo State"
_my_city="MomoVille"
_my_org="Momo LLC"
_my_email="[email protected]"
_my_valid_days=1830
_my_sec_size=2048
_my_key_pass=''
_my_domain="momo.com"
Before anything else, you need to create the CA first. This will be a self signed ca cert, the name is always ca
create the CA : ./makeca
This will create a cert signed by the ca previously created. The certs can be found under the certs directory
example : ./makecert awesome.momo.com
Note:
- makecert support SAN certs
- the keyword star and wildcard indicates a wildcard cert
- makecert -h for more help
This wil create a csr that can be use to request real certs. Do note that the information must match real values. no fakes. Normally the values from whois.
example : ./makecsr awesome.momo.com
Note:
- makecsr support SAN request
- the keyword star and wildcard indicates a wildcard cert
- makecsr -h for more help
view cert
./viewssl --type cert cert-file
view key
./viewssl --type key key-file
view csr
./viewssl --type csr csr-file
Enjoy d@ momo