2015-09-01

Generating self-signed certificate

You want SSL everywhere, including in development. Self-signed certificates are perfect for this. Here is a simple one-liner to generate the key and the certificate.

openssl req -nodes -x509 -newkey rsa:4096 -keyout key.pem -out cert.crt\
 -days 356 -subj “/C=CA/ST=Quebec/L=Montreal/O=IT/CN=www.example.com”

This will generate a new 4096 bits key named key.pem and a certificate named cert.crt. The certificate will be generated for the domain name www.exemple.com, in Montreal Quebec Canada.