Ca-certificates

CA Certificates

Overview

stub section Locate notes and refs here on CA cert creation and configuration.

^ To Configure CA Certificates

• https://letsencrypt.org/docs/certificates-for-localhost/

• https://gist.github.com/cecilemuller/9492b848eb8fe46d462abeb26656c4f8

• https://aboutssl.org/ssl-certificate-for-localhost/

Command at third reference seems much like cert generating command given at LetsEncrypt tutorial at first reference link:

openssl req -x509 -out localhost.crt -keyout localhost.key \
-newkey rsa:2048 -nodes -sha256 \
-subj '/CN=localhost' -extensions EXT -config <( \
printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")

And from LetsEncrypt tutorial:

openssl req -x509 -out localhost.crt -keyout localhost.key \
  -newkey rsa:2048 -nodes -sha256 \
  -subj '/CN=localhost' -extensions EXT -config <( \
   printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")