How to create a self-signed certificate using openssl

Summary:
- create a Certificate Signing Request (CSR) with the command:

- self-sign the Certificate with the command:

[iramper]

I LOVE YOU, man !!! You saved my life ^^ Been struggling a load with these files didn't know you have to link them this way by first generating key and they the certificate AWESOME, THANKS !!!!

[Ethorbit]

Thank you! Straight to the point and not confusing at all.

[BrightMinded]

good point! I'll do a video about it! stay tuned!

[boring]

Twice as complicated as you need, try this:

openssl req -new -x509 -nodes -extensions usr_cert -days 3652 -keyout self.key -out self.crt -subj /CN=localhost

It creates a v3 user self-signed certificate and key with the default (good enough) signing and digest choices with just the "common name" of localhost and a ten year timeout.

Though it you want to get ahead of the (elliptic) curve today you might want to do this:

openssl ecparam -name prime256v1 -genkey -out self.key
openssl req -new -x509 -nodes -extensions usr_cert -days 3652 -key self.key -out self.crt -subj /CN=localhost

It's likely that something like this will become the default real soon now.

NB: If your openssl complains about the "-subj" option is is FAR too old and will give you an insecure certificate.

[PraveenKumar]

Simple and informative. Thanks a lot.

[isad]

u r the hero nice tutorial it is help full for my gratuity project

[mariedimzon]

Hi! I would like to know if there is available openssl installer for a 64 bit windows 2008 R2?

[StalwartRobin]

great vid, how can find the file location when it generated using mac terminal !!

[nishahameed]

Very clear explanation thankyou. Request you to kindly put the commands in the description box.

[santoshkumar-hysb]

what is difference between our self signed ssl certificates and verisign/google/ibm certificates.

[RealEyes]

i opened my command line in win 10 and wrote what you wrote and this is what i get "'openssl' is not recognized as an internal or external command,
operable program or batch file."

[Dhajoshi]

Hello, Nice one, but can you show how to use this certificate and do we still need CA ?