User Tools

Site Tools


development:openssl

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Last revision Both sides next revision
development:openssl [2016/11/12 03:30]
anthonysena
development:openssl [2016/11/12 03:35]
anthonysena
Line 2: Line 2:
  
 This page will detail how to use [[https://​www.openssl.org/​|OpenSSL]] to create a Certificate Authority and how to generate a Secure Socket Layer (SSL) certificate for use with a web server such as Apache Tomcat. This is useful when you need to use SSL on a local development machine. As a general rule of thumb, if you need an SSL certificate for use on either a production or non-production instance, you should contact your organization'​s IT team to obtain a certificate that will work properly in your environment. This page will detail how to use [[https://​www.openssl.org/​|OpenSSL]] to create a Certificate Authority and how to generate a Secure Socket Layer (SSL) certificate for use with a web server such as Apache Tomcat. This is useful when you need to use SSL on a local development machine. As a general rule of thumb, if you need an SSL certificate for use on either a production or non-production instance, you should contact your organization'​s IT team to obtain a certificate that will work properly in your environment.
 +
 +Before moving ahead, please make sure that you have created your keystore and certificate sign request as detailed in the steps [[development:​security#​ssl_configuration_in_tomcat|SSL configuration in Tomcat]]
  
 ==== Creating a Certificate Authority ==== ==== Creating a Certificate Authority ====
  
-The following link describes the steps for creating a [[https://​jamielinux.com/​docs/​openssl-certificate-authority/​introduction.html|Certificate Authority using OpenSSL]]. Read the introduction and follow the instructions that are detailed in [[https://​jamielinux.com/​docs/​openssl-certificate-authority/​create-the-root-pair.html|create-the-root-pair]] and then [[https://​jamielinux.com/​docs/​openssl-certificate-authority/​create-the-intermediate-pair.html|create-the-intermediate-pair]]. For those using Windows, please note that you will need to modify the configuration files (openssl.cnf) that are referenced in the article since the paths are specific to Linux. For example, here is how the [CA_default] section would look for Windows:+The following link describes the steps for creating a [[https://​jamielinux.com/​docs/​openssl-certificate-authority/​introduction.html|Certificate Authority using OpenSSL]]. Read the introduction and follow the instructions that are detailed in [[https://​jamielinux.com/​docs/​openssl-certificate-authority/​create-the-root-pair.html|create the root pair]] and then [[https://​jamielinux.com/​docs/​openssl-certificate-authority/​create-the-intermediate-pair.html|create the intermediate pair]]. For those using Windows, please note that you will need to modify the configuration files (openssl.cnf) that are referenced in the article since the paths are specific to Linux. For example, here is how the [CA_default] section would look for Windows:
  
   [ CA_default ]   [ CA_default ]
development/openssl.txt ยท Last modified: 2016/11/12 03:47 by anthonysena