Create Your Own SSL Certificate Authority (Windows)

In this video, we’ll walk through creating your own certificate authority on Windows so that you can run HTTPS sites locally without issue.

00:00 - Introduction
00:30 - Git for Windows
02:37 - Generating the Private Key and Root Certificate
04:11 - CA-Signed Certificates for Your Dev Sites
06:30 - Conclusion

» USEFUL TOOLS FOR DEVELOPERS

[Hoggifer]

At 2:03, be sure to use winpty at the beginning of the code or else you'll get a blank response.

[OleksiiSorokotiaha]

Spend more than 20 hours to generate certificate for my localhost site, still failed, video does not help. My certificate does not appear in Trusted root, the further command... not understand what I'm doing totally...

[spiritualquest]

@DeliciousBrain - Thanks for the amazingly helpful tutorial. I have one question"

How the link is established between - Root Certificate (myCA.pem) which was generated initially, and the "hellfish.test.crt"?
Is it the FQDN name that was given as "Hellfish Media" (at 2:12 frame)?
I do not quite understand, how the link will be established between Root certificate and the domain specific certifcate?
Thanks!

[gusmueller]

at the end there you left me hanging. i am running iis, not apache and not ngnx

[Zorlayan]

is there any way to make uncopy a file or directory? Thx

[auym]

the x509 command line is not working at the \ -CAcreateserial command

[Hun_solos]

How do it create the x509 extension file?

[nomaanalwi]

Shoutout to the Lake Morraine wallpaper

[akshaytyagi]

Hey. I have a machine and i want to create a server that can be accessible anywhere with my public IP in my Iframe at DigitalOcean hosted website. Can I do these steps to achieve SSLWarning page removal? Please reply.

[stokitko]

It's a shame that the OpenSSL is not officially supported on Windows. For both OpenSSL Team and Microsoft. And it's shame that you can't easily create a CA with a certmgr tool. But I found that you can install and configure some Active Directory and it has CA tools where you can sign CSRs. Still it will be easier to use the console OpenSSL.
BTW the git for Win uses old OpenSSL v1 while there is OpenSSL v3 and some commands are differ a little bit. So you can copy some command from a tutorial and it will fail with some weird error.
I had this problem with -noenc flag that in the v1 was called -nodes. It's again a fail of the OpenSSL Team who removed the option without just deprecating it.
Another one confusing thing is that all tutorials, including your, are generating RSA keys while there is newer and faster ECC.
Thank you for the helpful tutorial, it was pleasure to watch and heard you👌

[auym]

copied exactly from the video keep getting unrecognised command tryed to move the \ to / or removing it nothing seems to work have even removed altogether plus the -help dose not list the \ as a parameter. please help with this

[OtherSideOfFlat]

But, you didn't show HOW to generate it, just import?

[LordCreo]

Nice video right up til the end when you just handwaved how you actually use the things we just created with a link to a site that doesn't explain it properly either :(

[danielflim]

This was a fantastic tutorial with helpful explanations!

[KramerEspinoza]

Why not using a real secure os… windows is crap