https://github.com/artemtech/ssl-maker
Simple script to create self signed certificate SSL with CA
https://github.com/artemtech/ssl-maker
Last synced: 4 months ago
JSON representation
Simple script to create self signed certificate SSL with CA
- Host: GitHub
- URL: https://github.com/artemtech/ssl-maker
- Owner: artemtech
- Created: 2023-10-04T02:30:05.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2024-12-01T10:24:20.000Z (over 1 year ago)
- Last Synced: 2025-03-29T13:35:23.964Z (about 1 year ago)
- Language: Shell
- Size: 23.4 KB
- Stars: 2
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# ssl-maker
Simple script to create self signed certificate SSL with self CA
## Usage
```bash
#1 create empty working directory for storing your ca
mkdir ./output/myca
#2 create ca key
./01-gen-cakey.sh ./output/myca
#3 generate config for ca
cp example-ca.conf myca.conf
nano myca.conf
# edit dir= , to your full path of myca directory that created in step 1
#4 create your ca
./02-create-rootca.sh myca.conf ./output/myca/
#5 generate config for server certificate
cp example-server.conf myserver.conf
nano myserver.conf
mkdir ./output/myserver
#6 generate your server csr
./03-create-csr.sh myserver.conf ./output/myserver/
#7 sign server.csr with root ca
./04-sign-server-cert.sh myserver.conf ./output/myserver/ ./output/myca/
#8 your server cert will generated in ./output/myserver/ folder
- server.crt
- server.key
- server-bundle.pem (server.crt + ca.crt)
# bonus
# if you want to create certificate for digital signature only,
# step 5
cp example-docsign.conf mydocsign.conf
nano mydocsign.conf
mkdir ./output/mydoc-cert
#6 generate csr
./03-create-csr.sh mydocsign.conf ./output/mydoc-cert/
#7 sign csr with root ca
./05-sign-docsign-cert.sh mydocsign.conf ./output/mydoc-cert/ ./output/myca/
```
# bonus creating intermediate certificate and sign new server certificate using intermediate ca
```
# create directory first
0. mkdir ./output/my-intermediate
1. cp example-intermediate.conf my-intermediate.conf
# edit the dir= config to ./output/my-intermediate (adjust it based on your need)
2. ./03-create-csr-intermediate.sh my-intermediate.conf output/my-intermediate/
3. ./06-sign-intermediate.sh myca.conf output/myca/ output/my-intermediate/
# if you want to create server cert that signed by intermediate:
# create directory first
1. mkdir ./output/my-server-2
2. cp example-server.conf myserver-2.conf
3. ./03-create-csr.sh myserver-2.conf output/myserver-2/
4. ./04-sign-server-cert-with-intermediate.sh myserver-2.conf output/myserver-2/ output/my-intermediate/
```
### reference
- https://openssl-ca.readthedocs.io/en/latest/sign-server-and-client-certificates.html