Open Tech Notes

Make a SSL Certificate

Step 1 make a temporary key file, which includes a passphrase.

      openssl genrsa -des3 -out temp.key 1024

Step 2 remove the passphrase from the key file
  
      openssl rsa -in temp.key -out www.domainname.com.key

Step 3

      a) make CSR file,then to buy a certificate

      openssl req -new -key www.domainname.com.key -out www.domainname.com.csr
   
       or

      b) generate CRT file directly

     openssl req -new -key www.domainname.com..key -x509 -out www.domainname.com.crt -days 999