Ca-certificates

CA Certificates

^ Overview

stub section

Locate notes and refs here on CA cert creation and configuration.

^ To Configure CA Certificates

• https://letsencrypt.org/docs/certificates-for-localhost/

• https://gist.github.com/cecilemuller/9492b848eb8fe46d462abeb26656c4f8

• https://aboutssl.org/ssl-certificate-for-localhost/

Command at third reference seems much like cert generating command given at LetsEncrypt tutorial at first reference link:

openssl req -x509 -out localhost.crt -keyout localhost.key \
-newkey rsa:2048 -nodes -sha256 \
-subj '/CN=localhost' -extensions EXT -config <( \
printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")

And from LetsEncrypt tutorial:

openssl req -x509 -out localhost.crt -keyout localhost.key \
  -newkey rsa:2048 -nodes -sha256 \
  -subj '/CN=localhost' -extensions EXT -config <( \
   printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")

^ Where To Store CA Certificates

• https://ubuntu.com/server/docs/security-trust-store

It may be necessary to create a directory for CA certificates for localhost, per the instructions in this Stack Exchange forum post:

• https://stackoverflow.com/questions/25946170/how-can-i-install-ssl-on-localhost-in-ubuntu