networking:ssl-own-ca
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| networking:ssl-own-ca [2023/04/02 16:36] – oscar | networking:ssl-own-ca [2023/04/02 16:39] (current) – [Creating CA-Signed Certificates for Your Dev Sites] oscar | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== | + | ====== SSL CA Authority for Local HTTPS ====== |
| When you generate a self-signed certificate the browser doesn’t trust it. It hasn’t been signed by a CA. The way to get around this is to generate our own root certificate and private key. We then add the root certificate to all the devices we own just once, and then all the self-signed certificates we generate will be inherently trusted. | When you generate a self-signed certificate the browser doesn’t trust it. It hasn’t been signed by a CA. The way to get around this is to generate our own root certificate and private key. We then add the root certificate to all the devices we own just once, and then all the self-signed certificates we generate will be inherently trusted. | ||
| + | In the example below we create wild card certificates for our local domain (home.lan). | ||
| ===== CA Key and Certificate ===== | ===== CA Key and Certificate ===== | ||
| Line 47: | Line 48: | ||
| When you should see the following two files: Home-CA.key (your private key) and Home-CA.pem (your root certificate), | When you should see the following two files: Home-CA.key (your private key) and Home-CA.pem (your root certificate), | ||
| - | ===== Creating CA-Signed Certificates for Your Dev Sites ===== | + | ===== Creating CA-Signed Certificates for internal Lan ===== |
| Now we’re a CA on all our devices and we can sign certificates for any new dev sites that need HTTPS. | Now we’re a CA on all our devices and we can sign certificates for any new dev sites that need HTTPS. | ||
| ==== Step 1: Create a Private Key ==== | ==== Step 1: Create a Private Key ==== | ||
networking/ssl-own-ca.1680453397.txt.gz · Last modified: by oscar
