Create a CA (Certificate Authority) using openSSL
OpenSSL download link:
https://slproweb.com/products/Win320p...
COMMANDS:
Generate the CA private key:
openssl genpkey -algorithm RSA -aes256 -out private/ca.key -pkeyopt rsa_keygen_bits:4096
Generate the self-signed CA certificate:
openssl req -new -x509 -days 3650 -key private/ca.key -out TheNetworkViking.crt -config openssl.cnf
Replace TheNetworkViking.crt with the name you want to provide to your self-signed CA cert (make sure to update the cnf file as well accordingly)
Generate a private key for the server/client:
openssl genpkey -algorithm RSA -out requests/tnv.key -pkeyopt rsa_keygen_bits:2048
Replace tnv.key with an appropriate name (e.g., webserver1.key, client1.key, etc).
Create a CSR for the server/client:
openssl req -new -key requests/tnv.key -out requests/tnv.csr -config openssl.cnf
Sign the CSR with your CA:
openssl ca -config openssl.cnf -policy policy_loose -extensions server_cert -in requests/tnv.csr -out certs/tnv.crt
OR
openssl ca -config openssl.cnf -policy policy_strict -extensions server_cert -in requests/tnv.csr -out certs/tnv.crt
The config file has been shared on my Telegram channel.
Connect with me on [email protected]
Join this channel to support my work:
/ @thenetworkviking
For more tech tutorials and cybersecurity tips, don't forget to like, share, and subscribe to my channel.
Connect with me on my social media for more updates and tips:
LinkedIn: www.linkedin.com/in/ahsan-abbas
Instagram: www.instagram.com/thenetworkviking/
Telegram: https://t.me/+XMvlae74cA9lYTRl
Twitter: twitter.com/TheNetworkVikin
If you have any questions or need further clarification, leave a comment below. Thanks for watching!