SSL certificate - internal

http://rubayathasan.com/tutorial/apache-ssl-on-windows

Cmd (not ps).

1. set OPENSSL_CONF=C:\Programs\Apache\httpd\Archive\openssl.cnf.

2. openssl req -new -out server.csr

Passphrase is only required in next step, not in httpd.

Debug

openssl req -in server.csr -text -noout

3. openssl rsa -in privkey.pem -out server.key

1. set RANDFILE=.rnd.

5. openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 365

Check

openssl x509 -in certificate.crt -text -noout

This generates V1 type certs, the extensions like SANs are not carried over.

openssl req -new -x509 -newkey rsa:2048 -sha256 -nodes -keyout server.key -days <days> -out server.crt -config cert.cnf

Tested with windows.

Openssl from httpd.

Generates V3 type certs.