Create Your Own Self Signed X509 Certificate
ฝัง
- เผยแพร่เมื่อ 8 ก.พ. 2025
- In this WiBisode Kevin will show how you can create signing certs for creating digital signatures! This is most often used to "lock" documents in a particular state, and then verified by the consuming application. The point of digital signatures is to create an application "trust" between two entities. When the consumer receives the document, it can validate the signature against the public key and feel confident that the document was "signed" by a trusted private key.
#WiBisode #SelfSignedCertificate #SelfSigned #Certificate #OpenSSL #WiBitNet
THANK YOU SO MUCH, I have been literally searching this for hours. This video should be recognized by YT algorithm for people who wanna make an self-signed certificate.
Thanks for the great feedback! Glad to help out.
you all prolly dont care but does someone know of a way to get back into an Instagram account..?
I was dumb forgot the password. I love any tips you can give me!
Two days of work investigating this... and you've solved it in a 7 minute video. Great job, man!!! Thank you so much! :)
My pleasure! Happy to help!!
I do infrastructure management, specifically working with a technology called NSX. I've been looking for a clear method to do exactly this, and its taken me literally 3 days of reading document after document before I found a comprehensible guide. Thanks man. My client should be pleased.
even after all these years, still a great video👍
well this is significantly easier than I thought it would be. thanks!
I wonder who are the people who usually downvote educative tutorials like this. Is it TH-cam?
It is people that can't pay attention for longer than 10 seconds.
Great video, you made it look so easy. Thanks
hi , i found from my old computer X509 Certificate From w3 - with tons of digital signs - can i knew for what all these ? 🤔
sweet & simple!
Anything easier for MAC user?
Very nice. Some more explanation of the latter steps (flags) would be nice.
Great video.Tabloid but dense description!
Thanks a lot for this tutorial, you made it very easy. I have a query though I have installed certificate in my local machine and web browser, I want to send a piece of encrypted information to a server and check if the certificate is working and it got decrypted from another end. Please guide.
Why do you need to add a System Variable PATH for OpenSSL? Isn't it the same and less work to just paste the OpenSSL exe file to Systems32 folder? Is there a benefit for adding a System Variable path over pasting to Systems32 folder?
You helped me tremendously thank you very much
So happy to hear that! Thanks for the comment!
Thanks a lot.
Most welcome!
Awesome video! FYI at half speed its the perfect 'drunk/slur' voice!
HA HA!!!!!! I'll have to try that!!! Thanks! BTW, why would you watch a yt video at half speed?!
@@WiBitnet Oh I was just following along and being my first time doing this video was going a bit fast for me, slowed it to half speed. I could have resumed to normal but I was too entertained watching at half :P Again awesome video, worked perfect for me!
Can't open C:\Program Files\OpenSSL-Win64\bin for reading, Permission denied .............
Make a video on How To Create a X509 Certificate using C#
Actually, that is pretty easy to do. I will put that on my list.
thank you ❤
You're very welcome.
Very helpful. Thanks.
Glad it was helpful!
Can we create pfx using public key only?
Sure. Try using a tool like Portecle.
Nice Job, thank you!! With this videotool i was able to build this important solution. Danke, Grazie mille ;-)
can u make this(openssl) compile from C# and create x509 centificate? please
y como lo borro?
Thanks man. If I meet you in real life, I'll give you a drink.
Sounds like a plan!
Good! Helpful for me bro
Awesome! Very glad you enjoyed the video!
Hi I am intrested to creat a Signed extended validation Certificate (EV SSL) but I don't know how, can you do a video on how to do an EV SSL? Thank you
You're the best man, thanks a lot!
Very nice Video.
when i went to delete the files, i couldnt find them what can i do if what i did never saved ?
good job, thanks!
Glad to help!!
Can we use this for websites
You can but the clients will get certificate errors. You can do end to end SSL through a CDN like Cloudflare. You cna instruct them to connect to your web server that has a self signed cert and ignore cert warnings. Otherwise you'll wanna get a certificate from a trusted CA and pay the $.
@@WiBitnet how can I get an end SSL through cloudflare
@@SherinSunny-rj3py You can have the self signed cert on your web server, and front the requests using Cloudflare.
hello sir i got the error like this:
unable to find 'dstinguished_name' in config
problems making certificate requiest
3128:error:0E06D06A: configuration file routines:NCONF_get_string:no conf or environment varible:crypto\conf_lib.c:272:
Please give me answer.
If you are issued a .crt file from a 3rd party entity, what steps are needed to create a .pfx or .pem file? I have searched my laptop for the private key file, from when I downloaded the cert, but am unable to locate it....
How did you create the private key? Was it done in IIS?
@@WiBitnet I had to request a mew cert, the system I originally downloaded the cert from was decommissioned. Once I downloaded the new file, it asked to be installed via web browser. Once I installed it I was able to go into browser, personal cert tab, and export to pfx. Both files were then in the folder. I will test tomorrow by importing in IIS. Also will test the open ssl scripts, will post my findings....
@@user-ym9wb2mk5e It's hard to help without knowing exactly what your set up is. If you have the CRT file issued by a 3rd party, then somewhere you have your private key which was used to create your CSR. You need that private key in order to create your PFX file. Since I don't know how your CSR was created, I am not sure how helpful I can be. Maybe this video I made is helpful: th-cam.com/video/oxDUdjbdfR0/w-d-xo.html
@@WiBitnet I got it fixed. Since the original server was decommissioned, the private key was lost. I now have the new cert and private key from our 3rd party, so I can move forward. Lesson learned, make sure to backup the private key in case someone takes down the requesting PC/server! Thanks for taking the time to reply!
@@user-ym9wb2mk5e My pleasure! I am glad to hear things worked out!!! Always make backups of your private key, but make sure it is stored in a place where it can't be stolen because you can be compromised.
I'm getting a distinguished_name error and the documentation isn't helping.
Could somebody point me to the continuation of this video?
Thank you
RITUALAOS th-cam.com/video/weiFeQKxqDc/w-d-xo.html
where can I find the download the windows version seams to be disabled for download;
OpenSSL? Should be here now: gnuwin32.sourceforge.net/packages/openssl.htm
How to digitally sign the xml documents using php?
i keep getting unable to write "random state" when trying to create the PFX.
In practice, the most common reason for this happening seems to be that the .rnd file in your home directory is owned by root rather than your account. The quick fix:
sudo rm ~/.rnd
run CMD with admin rights ie. cmd run as administrartor.
brother i want to ask you can we make ev ssl like ssl ?
An EV cert (assuming you're talking about Extended Validation Certificate) need to be signed by a Certificate Authority. I would love to do a video series about creating your own Certificate Authority, however, it wouldn't be useless over the Internet unless you have $$ and become a trusted CA by Internet Providers as a third party trust. But having your own CA is great for your own internal apps for an organization or business. Let me know if I misunderstood your comment.
Thanks!
Hey, i m doing exactly as you are doing and i get "openssl is an invalid command".
If i remove it and start with "req" i get error in req.
I just dont get it...its been like this for days!!! :(
+Patricia Tripolitsioti Hi Patricia, you gettin openssl invalid, because you are not adding openssl path in environment variables.
Hi, This is great video but I am still confuse for my SSL required,
any one can help me to create certificate and key File that format or extention as PEM?
The signature must include SHA256 with RSA Encryption.
Key algorithm must be RSA Encryption with Key Lenght minimum 2048 and date valid until 7300.
This is required SSL by the system. i got confuse to make this command running at openssl.
So Quick you are... Must explain each step slowly
I live to annoy. Especially you.
@@WiBitnet hahaha dang, you're awesome!
Hello Dear Sir,
I faces 2nd command poblem.
cd Desktop
then openssl
but after wich buttom press next step???
openssl> ^c I don't understand this
You can just press CTRL together with C.
thanks
Thanks.
My pleasure.
hello bro. how to use this on godady??
REPLY URGENT SIR: I am not getting the two files onto the desktop when I run the first command. So can you please resolve my problem..?
If "c:\Program Files (x86)\openssl\bin> " is shown in your command prompt, then your keys are in that path. Hope this helps.
It's not letting me enter in the passphrase for some stupid reason, therefore I can't type anything in... :-(
+Tad Evans In DOS at a password prompt it hides what you are typing. It doesn't look like you are entering anything but you are. Just type your passp
hrase and press enter.
Thaks alot
Please go to stackoverflow.com for an answer to your question.
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365
Thanks
error req: unrecognized flag day
thanks!! save my life!!! kkkkk
Happy to help!