Create & sign SSL/TLS certificates with openssl

[@aniket-kulkarni]

Man, I even took a 3 hour Pluralsight course on this. But none were as good as yours. You're just incredibly awesome.

[@TECHSCHOOLGURU]

Wow, thanks!

[@rishijain7171]

Pluralsight is highly overrated!

[@vs-cw1wc]

I wish every tech video on KZbin is like this.

[@TECHSCHOOLGURU]

Thanks!

[@1249R]

Beauty.... Thank you so much.. I was trying to setup self signed certs in my controlled environemt and i was always confused about all this. You made it very simple... Awesome

[@TECHSCHOOLGURU]

You got this!

[@roberto_camp]

badass job! one of the best SSL videos I've ever watched!

[@TECHSCHOOLGURU]

Thank you!

[@VisualMemoryBlue]

Your tutorial was so helpful, especially for the Subject Alternative Name Section in the Certificates. Thanks a ton, you rock!!

[@TECHSCHOOLGURU]

Awesome, thank you!

[@sudeepagrawal404]

This is simply excellent and exactly what I have been looking for weeks in the past. Thanks bud.

[@TECHSCHOOLGURU]

Glad I could help!

[@NamitKewat]

Thank you for the tutorial. I really enjoyed watching both videos(this & SSL/TLS overview).

[@TECHSCHOOLGURU]

Thanks! Glad you enjoyed it!

[@tonykososki3016]

Man that last video was very good! I couldnt understand everything but its a piece of good kowledge!

[@TECHSCHOOLGURU]

Glad to hear that!

[@davesradiorepairs6344]

WOW...!!! To actually see some of these commands used, and how they is priceless... Thank you...!!! Don't stop now... Hope you'll make more videos explaining some of the options for various commands..

[@TECHSCHOOLGURU]

Thanks, will do!

[@sushillakra21]

Thank you very much, you saved me ton of time understanding openssl to create self signed certificate.

[@TECHSCHOOLGURU]

Great to hear!

[@shmulick14]

Thank you so much That was exactly what I was looking for !!!

[@TECHSCHOOLGURU]

Glad I could help!

[@electrotsmishar]

man, that was a wonderful explanation. good job

[@TECHSCHOOLGURU]

Much appreciated!

[@ThanhPham-vv3rb]

Thật bất ngờ khi anh là người Việt Nam. Cho em xin được gửi lời chào và cảm ơn anh vì video.

[@TECHSCHOOLGURU]

Thanks em!

[@rahulchitta7268]

This is brilliant work! Thank you so much for this. :)

[@TECHSCHOOLGURU]

Thank you!

[@patrickm9953]

Super helpful, thanks !

[@mahmoudgeiziry3100]

great tutorial as usual

[@TECHSCHOOLGURU]

Thanks again!

[@christianthomas4519]

Great video and explanation. Is there a way to change the notBefore date? I want to rotate certs and need to create certs that have start dates in the future and not at the time of creation, so just wondering if there's a way to change the startdate or notBefore date, thanks.

[@sombiri9147]

Great video, thank you

[@sivaprasadkandhagaddalaven3544]

Thanks for the detailed explanation. It is simply awesome! I have a question, that in my project i want to use .p12 format certificate file for SSL web server hosting and SSL pinning at client app end. Could you please let me know, how to create .p12 using the files u created .pem ?

[@TECHSCHOOLGURU]

I think you can use the openssl pkcs12 command to convert the file man.openbsd.org/openssl#pkcs12 Here are some tutorials: www.paypal.com/us/smarthelp/article/how-do-i-convert-my-pem-format-certificate-to-pkcs12-as-required-by-the-java-and-.net-sdks-ts1020 help.hcltechsw.com/appscan/Standard/9.0.3/en-US/t_ConvertthepfxCertificatetopemFormat068.html

[@myfliper123]

Wow man thanks very much u really help me

[@TECHSCHOOLGURU]

Happy to help!

[@gedeonandrasmusic]

Amazing tutorial, thank you very much!

[@TECHSCHOOLGURU]

Glad it was helpful!

[@ProjectAryawarta]

Do you have any video which uses these pem files, not sure which one to use? like how can I use this for mongodb ssl or how can I use it for springboot app?

[@TECHSCHOOLGURU]

Yeah, you can take a look at these 2 videos: kzbin.info/www/bejne/oJ7UfX2De7iSr6s kzbin.info/www/bejne/mXW2goBpZ5eJnpY

[@iamgentwo9292]

Excellent! tried on linux and Chrome / Firefox recognize the ca-cert-pem without any issues, but it didn't work on Windows (Chrome /internet explorer). is there any conversion need to be done?

[@joqiao400]

Thanks for the tutorial!

[@TECHSCHOOLGURU]

Happy to help!

[@merrymouse2008]

If you are on Mac and when you are using ./gen.sh command and you get "permission denied error', then you have to give it the execution permission by using "chmod +x ./gen.sh" command (you are in your file folder). And then try to run ./gen.sh one more time. It should work now.

[@TECHSCHOOLGURU]

Thanks for the tip!

[@dan00b8]

Can this CA be used for https proxying, like Burp Suite's CA does?

[@etuckram]

How do I implement it on my own webserver and host? Do you have a video for that? Nice video. I subbed!

[@baloguntobi917]

Hey bro. Help me with this question: With tls you can still read the email and secret (maybe password) sent from the client to the server in the network tab so what exactly is being encrypted?

[@SaurabhGupta-xv4fk]

if you are using gitbash in windows and the -subj option is not working convert all / to // because mingw is trying to change the arguments that looks like paths to actual paths which we don't want in this case. so // will escape that

[@TECHSCHOOLGURU]

Thanks for the information!

[@samanthaletourneau9709]

I followed your video to generate the files for using haproxy with SSL. I got all the files exactly as you did and I ran openssl verify -CAfile ca-cert.pem server-cert.pem which says server-cert.pem: OK. In order to make haproxy with SSL to work, I need to have only one .pem file which contains the private key, the certificate and the chain values. Can you tell me what content of those files generated need to be used by order of importance in order to create the latest .pem file for haproxy ? Thank you

[@kiransowpati]

thanks, good session on steps of ssl cert generation

[@TECHSCHOOLGURU]

Thanks!

[@randomvideos3628]

nice explanation!

[@TECHSCHOOLGURU]

Thanks! 😃

[@shrinidhij]

OH! Thank you so so much!

[@TECHSCHOOLGURU]

Thank you for watching, Shrinidhij!

[@sajanjaiswal8582]

Great Work

[@TECHSCHOOLGURU]

Thank you! Cheers!

[@HelloWorld-tn1tl]

This is super !

[@TECHSCHOOLGURU]

Thanks!

[@rafayelhakobyan2544]

Thanks a lot bro

[@autopilot1569]

I skipped creating 'server.ext.cnf' for some reason it returned an error. I got a command not found. But I guess all i need for now for server testing purposes are the the key and cert files. huge help, appreciate it!

[@TECHSCHOOLGURU]

Thanks for watching!

[@nossandra]

Thank you very much!

[@TECHSCHOOLGURU]

Welcome!

[@eduardodasilvaramos]

Você foi simplesmente fantástico! Muito obrigado.

[@TECHSCHOOLGURU]

Thank you!

[@Spartacus69]

Does open SSL certs allow the use of geolocation API in browsers?

[@TECHSCHOOLGURU]

Yes, Benjamin. Browsers often require SSL to enable geolocation.

[@harsheenajunejo2981]

Hi Could you please guide me how can i enable TLSv1.1 in openssl

[@TECHSCHOOLGURU]

Hi Harsheena, TLS 1.1 is already deprecated. I think you should use at least TLS 1.2, or better move to TLS 1.3 to be more secure.

[@guk469]

Using the generated certificate to configure HTTPS on the webserver how can we do that ??

[@TECHSCHOOLGURU]

Hi Ghazala, I will cover it in one of my video soon.

[@guk469]

@@TECHSCHOOLGURU thankew

[@ahmadzahid4225]

How do I use this SSl file and connect my wordpress sites with it

[@TECHSCHOOLGURU]

Hey Ahmad, I think this kind of self-signed certificate is only suitable for development/testing. On production, you should use a real certificate. Maybe you can checkout Letsencrypt letsencrypt.org/

[@travelfoodcamping]

Thank ypu the vedio

[@TECHSCHOOLGURU]

Thanks!

[@Vinay-gn7vg]

Anyone please help me to resolve the below error. Can't open server-ext.cnf for reading, No such file or directory

[@TECHSCHOOLGURU]

Hi Vinay, you just need to create that file. Please check out the code here: github.com/techschool/pcbook-go/blob/master/cert/server-ext.cnf

[@Vinay-gn7vg]

@@TECHSCHOOLGURU thanks for your reply I resolved the issue

[@elontran7907]

You are from VN ?

[@TECHSCHOOLGURU]

Yes, I am

[@ernieblessed9510]

still dont get it, why this stuff is complicated as hell

[@TECHSCHOOLGURU]

Hi, maybe you should watch this video first to get a better understanding about TLS: kzbin.info/www/bejne/Y5eXeJWhYrpqa5o

[@getanehgeto7873]

not visible

[@TECHSCHOOLGURU]

why not?

[@katalyst9644]

great

[@TECHSCHOOLGURU]

Thank you!

[@sombiri9147]

Great video, thank you

[@TECHSCHOOLGURU]

Glad you liked it!