Skip to main content

SSL certificate

If you already have a certificate, skip this.

Self-signed certificate​

Use a self-signed certificate if you are deploying locally.

Ubuntu​

There is a pair of self signed certificate and key on all ubuntu installations already.

/etc/ssl/certs/ssl-cert-snakeoil.pem
/etc/ssl/private/ssl-cert-snakeoil.key

Generate a pair of certificate and key​

Install openssl​

Debian​
sudo apt install openssl
Arch​
sudo pacman -Sy openssl
RHEL​
sudo dnf install openssl

Generate certificate and key​

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/selfsigned.key -out /etc/ssl/certs/selfsigned.crt
/etc/ssl/certs/selfsigned.crt
/etc/ssl/private/selfsigned.key

Let's encrypt​

Let's encrypt is a free certificate service.

Please follow the configuration for let's encrypt, then see letsencrypt.