Openssl Self Signed Certificate
Nice instructions 201909 - https://deliciousbrains.com/ssl-certificate-authority-for-local-https-development/
Example 2019, create self signed certificate with keyUsage flags
- openssl req -out test.csr -newkey rsa:4096 -nodes -keyout test.key -config cert.cnf
- openssl x509 -req -days 365 -in test.csr -signkey test.key -sha256 -out test.crt
- cert.cnf
[ req ] default_bits = 4096 distinguished_name = req_distinguished_name x509_extensions = v3_req [ req_distinguished_name ] countryName = Country Name (2 letter code) countryName_default = NZ stateOrProvinceName = State or Province Name (full name) stateOrProvinceName_default = Auckland localityName = Locality Name (eg, city) localityName_default = Auckland organizationName = Organization Name (eg, company) organizationName_default = Infra&Networks commonName = Common Name (e.g. server FQDN or YOUR name) commonName_max = 64 commonName_default = test.vigor,nz [v3_req] basicConstraints = CA:FALSE keyUsage = keyEncipherment, digitalSignature, nonRepudiation extendedKeyUsage = serverAuth, clientAuth subjectAltName = @alt_names [alt_names] DNS.1 = test1.vigor.nz