DEV Community

Yaroslav Polyakov
Yaroslav Polyakov

Posted on • Edited on

Your own Certificate Authority (CA) in ONE simple command

You can find many instructions how to make certificates with OpenSSL. OpenSSL is very good except... it's too complex.

Showcert is OpenSSL for humans, much simpler to use and it has gencert utility to generate certificates. Very easy.

Generate self-signed cert with simple command

gencert example.com www.example.com
Enter fullscreen mode Exit fullscreen mode

This will make self-signed cert. Easy, isn't it?

Your own CA

Generate CA certificate (1 command):

gencert --ca MyCA
Enter fullscreen mode Exit fullscreen mode

Thats all! Now, you can import generated MyCA.pem file to browsers and generate signed certificates for sites:

gencert --cacert MyCA.pem --cakey MyCA.key example.com
Enter fullscreen mode Exit fullscreen mode

What could be simpler?

Install showcert and play for yourself.

Top comments (0)

Billboard image

The Next Generation Developer Platform

Coherence is the first Platform-as-a-Service you can control. Unlike "black-box" platforms that are opinionated about the infra you can deploy, Coherence is powered by CNC, the open-source IaC framework, which offers limitless customization.

Learn more

👋 Kindness is contagious

Explore a sea of insights with this enlightening post, highly esteemed within the nurturing DEV Community. Coders of all stripes are invited to participate and contribute to our shared knowledge.

Expressing gratitude with a simple "thank you" can make a big impact. Leave your thanks in the comments!

On DEV, exchanging ideas smooths our way and strengthens our community bonds. Found this useful? A quick note of thanks to the author can mean a lot.

Okay