Self Signed Certificate

Creating self signed certificate using OpenSSL

CA Certificate

openssl genrsa 2048 > ca-key.pem openssl req -new -x509 -nodes -days 18250 -key ca-key.pem -out ca-cert.pem (18250 = 365 * 50 years)

Server Certificate

openssl req -newkey rsa:2048 -days 18250 -nodes -keyout server-key.pem -out server-req.pem openssl rsa -in server-key.pem -out server-key.pem openssl x509 -req -in server-req.pem -days 18250 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 -out server-cert.pem

Client Certificate

openssl req -newkey rsa:2048 -days 18250 -nodes -keyout client-key.pem -out client-req.pem openssl rsa -in client-key.pem -out client-key.pem openssl x509 -req -in client-req.pem -days 18250 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 -out client-cert.pem

Verify Certificate

openssl verify -CAfile ca-cert.pem server-cert.pem client-cert.pem