Next, we will generate the root certificate which will be valid for 1024 days:

Openssl genrsa -des3 -out ~/ssl/rootCA.key 2048

Next, paste the following line which will generate a RSA private key:

Which will show all files in the ~/ssl/ directory. You can verify the files are in the directory by typing KeyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment You can change these attributes to reflect those of your own organization:įollowed by an enter. Next up, create a file named by using your text editor of choice, in this case, I’m using viĪnd copy the following information (for more information about what each field after does, refer to this guide by Oracle). We now need to enter that directory by typing: This will create a directory called ssl in your root folder. Open up a terminal and type the following: The following steps need to be taken to create a certificate with SAN for localhost: Generating the certificate This does involve some messing around with the command line but is not too hard to do. Getting a certificate with the right properties can be a daunting task, but luckily Alexander Zeitler has written a guide on how to generate a certificate with a Subject Alternative Name. Since Chrome 58, certificates for use on localhost need to have a SAN, Subject Alternative Name. Generating a self-signed certificate for local use It combines free software such as Apache, NGINX, and MySQL and is the software of choice here at Really Simple SSL headquarters. MAMP is a one-click solution for macOS and Windows for setting up a local development environment. The instructions are based on macOS Sierra 10.12.5, using MAMP (Apache) and Chrome 59. This guide will walk you through all the necessary steps to get a working certificate on localhost. If you do development on your own machine, then deploy to production, and you have an SSL certificate on your site, it is useful to have SSL on your localhost environment.

Mamp for windows 10