Linux: Create SSL certificate (self-signed)

Step-by-Step descriptions of how to do things.
Post Reply
User avatar
Site Admin
Posts: 1469
Joined: Fri Aug 29, 2003 8:39 pm

Linux: Create SSL certificate (self-signed)

Post by ^rooker »

Here's a short BASH script that creates SSL certificates and puts them in apache's folders - ready for use:

Code: Select all

# @author: ^Rooker
# @date: 08.DEC.2013
# @description:
#   This script is just to help my (forgettable) memory when (re-)creating 
#   an SSL certificate and key for use with Apache webserver for secure (https) connections.
#   Most information where taken from the following HowTo article:
#       This script must be run with root-priviledges. What a surprise! ;)

DAYS_VALID=666              # How many days until the generated certificate expires.


if [ -z "$NAME" ]; then
    echo "ERROR: Please provide a name for the certificate. e.g. 'the_shadow'"
    exit 1

# These things only have to be done once, to enable SSL support on Apache:
# - Enable Apache's SSL module:
a2enmod ssl
# - Enable Apache's SSL vhost site:
# NOTE Enable sites manually. "default-ssl" is just the regular off-the-shelf example.
#a2ensite default-ssl

# Create folder for Apache SSL certificates:
mkdir -p "$CERT_DIR"

# Generate a self-signed certificate:
sudo openssl req -x509 -nodes -days $DAYS_VALID -newkey rsa:2048 -keyout $SSL_KEY_FILE -out $SSL_CRT_FILE
Then call it, giving the certificate a useful name. "the_shadow" for example. That's the name of the webserver:

Code: Select all

$ ./ "the_shadow"
Then reload Apache:
(This example is for Debian/Ubuntu based distros)
$ sudo service apache2 reload
Done! :D
Jumping out of an airplane is not a basic instinct. Neither is breathing underwater. But put the two together and you're traveling through space!
Post Reply