Differences

This shows you the differences between two versions of the page.

--- openssl [2024/06/23 06:30] – [Sign fake domain] A User Not Logged in
+++ openssl [2025/04/08 12:41] (current) – [Trust self signed certs] ealmr
@@ Line 1: / Line 1: @@
+====== Trust self signed certs ======
+Debian based:
+  cp $DOMAIN_CRT /usr/local/share/ca-certificates/
+  update-ca-certificates
+Arch Linux:
+  trust anchor $DOMAIN_CRT
+  #to trust non CA cert, see https://github.com/harvester/harvester/issues/4134#issuecomment-1888918283
+  sed -i 's/certificate-category: other-entry/certificate-category: authority/g' $P11_KIT
+  update-ca-trust
+Alpine:
+  cp $DOMAIN_CRT /usr/local/share/ca-certificates/
+  update-ca-certificates
+  ls -la /etc/ssl/certs/ | grep $DOMAIN_CRT
 ====== General commands ======
@@ Line 54: / Line 74: @@
   openssl x509 -req -in domain.csr -CA intermediate.crt -CAkey intermediate.key -CAcreateserial -out domain.crt -copy_extensions copyall -days 3650
+resign domain certificate from CSR directly with key:
+  openssl x509 -req -in domain.csr -key domain.key -out domain.crt -copy_extensions copyall -days 3650
 ====== Create cert for IP ======