I've set up SSL on my webserver, now I need two files:
- a certificate
- a certificate Key
How do I create a self-signed certificate for testing purposes?
Ubuntu, even the 'minimal' flavour, comes with the
The files you're looking for are already on your system:
If for some reason you need to create a fresh certificate, you can run
If you want to change the expiration date of you certificate, you can manipulate the make-ssl-cert script at
Where you can change the expiration date by adding the
More options can be found in the manual page of
As already mentioned, Ubuntu Server comes with the necessary tools. Depending on your server version you'll have to look up the specific documentation. I'll try to summarize the self-signed certificate generation process of the current LTS (12.04).
First you generate the keys for the Certificate Signing Request (CSR):
It's up to you to enter a passphrase or not. If you do, everytime you (re)start a service usign that certificate, you'll have to provide the passphrase. Otoh you can create an "insecure" key without a passphrase from the secure one:
And now you'll create the CSR from the key. With the CSR and the key a self-signed certificate can be generated:
The last step consists of installing the certificate and the key, in Debian/Ubuntu usually in
And finally the applications using the certificate/key have to be configured accordingly.