Arejae.Com

There are a few way to generate a self signed SSL certificate . You can read it here,here and here .

This is the most inexpensive way to use a ssl connection because it’s totally FREE. From a cryptographic perspective, there is no difference in security whether you use a self signed SSL certificate or buy an expensive SSL certificate.Of course,you will get a warning from your browser but the data is still encrypted.

Make no mistake, these certificates are good only for personal use or for use in your intranet in order to provide a secure way to login or communicate with your services, so that passwords or other data is not transmitted in the clear.

The following simple commands,create a self-signed key/certificate pair with a lifetime of 1 years.

sudo openssl genrsa 1024 > server.key
sudo openssl req -new -x509 -nodes -sha1 -days 365 -key server.key > server.crt

After that, just follow a few instruction appear in the console.

Yep..that’s it.

Now you need to copy those files to a specific folder.Assuming you installed your apache server using XAMPP below are command that you need to execute.If not, then here you can find are great tutorial on how to install XAMPP in ubuntu.(Tutorial dalam Bahasa Melayu)

sudo cp server.crt /opt/lampp/etc/ssl.crt
sudo cp server.key /opt/lampp/etc/ssl.key

You can find ssl configuration file in here : /opt/lampp/etc/extra/httpd-ssl.conf if you need to change anything.

After you have restart your apache web server and point your url to https://localhost you can find that your web server is already been authenticated by yourself.

Disclaimer: I’m not an expert and no authority on digital certificates.This document is a summary of all the articles I have read about openssl and self signed SSL certificate.

Update: http://www.arejae.com/blog/self-signed-ssl-work-around-to-get-rid-of-certificate-error-message.html

If you're new here, you may want to subscribe to my RSS feed or get my latest post directly in your mailbox. Thanks for visiting !