Take Back the Darknet (Part 11)

Part 11 – Configuring HTTPS (SSL)
Generate SSL keys via CAcert.org. Great website for doing this is right here.

You’ll need to create three things:
.csr for the certificate signing request (CSR)
.crt for the signed certificate file
.key for the key file

cd ~
openssl genrsa -out tim.key 4096
openssl req -new -key tim.key -out tim.csr

cd ~
wget http://www.cacert.org/certs/root.txt
sudo cp root.txt /etc/ssl/certs/cacert-root.crt

sudo mv tim.key /etc/ssl/private/tim.key
sudo mv tim.crt /etc/ssl/certs/tim.crt

sudo chown root:root /etc/ssl/private/tim.key
sudo chmod 600 /etc/ssl/private/tim.key

sudo chown root:root /etc/ssl/certs/tim.crt
sudo chmod 644 /etc/ssl/certs/tim.crt

Country Name (Two letter code e.g. AU)
State or Province Name (e.g. NSW)
Locality Name (e.g. Sydney)
Organisational Name (e.g. Tim's Website)
Organisational Unit Name (e.g. Website)
Common Name (Domain name *.tim.net or tim.net)
Email Address (e.g. [email protected])

Advance onward to part 12 or head back to the table of contents on page 1.