Menu

Generating Self Signed Test Certificates with OpenSSL

 
This is how you can generate self signed certificates using OpenSSL;
 
1)     Download OpenSsl here - https://slproweb.com/products/Win32OpenSSL.html;
 
2)     Create a new folder where you will create the key;
 
3)     Navigate to the folder open a cmd prompt and run openssl.exe;
 
4)     At the prompt Openssl > run the following commands:
 
a.     dhparam -check -text -out dh2048.pem 2048 (this will take a long time)
b.     genrsa -des3 -out server.key 1024
c.     req -new -key server.key -out server.csr
 
5)     Escape openssl (exit command) to return to the cmd prompt and type the following:
 
a.     Copy server.key server.key.org;
 
6)     Run openssl.exe again and at the prompt Openssl > run the following commands:
 
a.     rsa -in server.key.org -out server.key (This removes the passphrase);
b.     x509 -req -days 365 -in server.csr -signkey server.key -out server.crt;
 
7)     Exit Openssl and run the following command at the cmd prompt:
 
a.     Type server.crt server.key server.crt > server.pem
 
You will now have generated the server.pem file to use with ChronoScan