How to create a valid self signed SSL Certificate?

Рет қаралды 339,923

Күн бұрын

In this video, I will explain how to generate valid self-signed SSL certificates for your internal network. We will use an open-source tool, OpenSSL to create an SSL cert for my Proxmox Server, that is valid for my internal domain and my private IP address. #OpenSSL #TLS #HomeLab
My GitHub Cheat-Sheets: github.com/christianlempa/che...
Teleport-*: goteleport.com/thedigitallife
Follow me:
TWITTER: / christianlempa
INSTAGRAM: / christianlempa
DISCORD: / discord
GITHUB: github.com/christianlempa
PATREON: / christianlempa
MY EQUIPMENT: kit.co/christianlempa
Timestamps:
00:00 - Introduction
00:51 - Some TLS basics
04:33 - What are valid SSL Certificates?
07:45 - Why use Self Signed Certificates
11:53 - Advertisement-*
12:27 - Generate a Private CA
16:31 - Generate and Sign an SSL Cert
21:11 - Upload a Full chain Cert
22:22 - Import Private CA in Windows
________________
All links with "*" are affiliate links.

Пікірлер: 503

@RayDeMoss 2 жыл бұрын

Thank you very much. This was extremely useful. You took a very confusing and convoluted process and made it as easy to understand as possible. I was able to setup certs on several home servers that I've been trying to figure out for years. I really appreciate your time making this video. Very helpful.

@christianlempa 2 жыл бұрын

Glad it was useful! Thank you ;)

@charleseaster3518 5 ай бұрын

Hi Christian, I have been watching your videos for ages and with your help I have grown my little raspberry pi "home lab" out into 3 separate servers running more services than I have any business or need to run. I enjoyed this video and it was very informative. Thank you for all the help and wish me luck setting up my own CA.

@SomeGuyFromFlorida 2 жыл бұрын

Might be the most important video I've watched in 5 years, wow. Thanks SO much for this, very well done!

@christianlempa 2 жыл бұрын

Glad you enjoyed it!

@cyn1x 2 жыл бұрын

You really know your stuff. So much information in 25 minutes!

@RandomAlias1 Жыл бұрын

Hands down, absolutely outstanding work. Thank you so much for this video. I absolutely loved it. You earned a sub!

@kanylekrigeren 2 жыл бұрын

This was exactly what I needed to understand the cert-creation process. Thank you, and I have now subscribed to your channel :D

@christianlempa 2 жыл бұрын

Thanks! Glad it was helpful 😉

@nirvanah641 Жыл бұрын

Thanks a million! I was following some other documented tutorials and none of them seem to explain what is important and what is not. I didn't have a DNS name so I had to rely on IP addresses. After spending 2 days of trying to setup SSL certificates, I finally found and followed your video and it just worked straight away!

@christianlempa Жыл бұрын

Thank you! Glad that it helped ;)

@fabiena1787 Жыл бұрын

Thank you so much. I had been annoyed by this for a long time. I appreciated very much your way of explaining things with just the level of details needed (at least in my case). I could follow the steps one after the other and it worked fine. I wrote down the process to repeat this in the future. Thank you so much again, from France.

@christianlempa Жыл бұрын

Thank you! Im glad you enjoy the content :)

@LordDemonos 4 ай бұрын

I subscribed last week, mostly because I'm into Docker and you seem to cover it a lot. You've already proven to be quite useful with this tutorial, which I ran into completely by coincidence. Just wanted to say I really appreciate you, thanks!

@christianlempa 4 ай бұрын

Thanks man! :)

@TinkerTech 2 жыл бұрын

just started to dip my toes into self signing so this is wonderful timing that you to made a fresh video about it. 🤗

@christianlempa 2 жыл бұрын

Thank you! Glad it's helpful 😀

@ZeeKay80 Жыл бұрын

Great video! You've corrected the topic in great detail. This will be my reference video on this topic. Keep producing video on these interesting topics. You've got a new subscriber

@johns7278 Жыл бұрын

Thanks so much for this video. It really helped me a lot. For a long time I was having problems with other tutorials tying to configure this, and with your video I managed to get everything working really fast. Thanks again!

@photoshop-requests Жыл бұрын

After a very long time struggling with it I finally got it working thanks to you! Thank you!

@pedrobarone4786 2 ай бұрын

I've been trying this for weeks, and you managed to make me understand and actually learn something about certificates. Indeed, you are an excelent teacher! Thanks a lot

@christianlempa 2 ай бұрын

Thank you so much! Glad it helped :)

@peculiar6392 Жыл бұрын

Nice overview about CA's and how Windows trust certificates from websites. And well detailed explanation about the steps to generate a valid certificate. It really comes in handy to me right know, because I was dealing with some troubles to generate a certificate to a local system in my job. Thank you very much! Keep it up! 👏👏👏

@christianlempa Жыл бұрын

Thank you! Glad it helped :)

@PabloVillaronga 2 жыл бұрын

Excellent will use it today ! Thanks for documenting all process !

@BlitzFingers 7 ай бұрын

Thanks Bro. This explanitation gave me the needed steps to finally learn the SSL certificate concept and creation. All of my internally hosted consols are now secure. It was even possible for me to adjust my certificate chain for a cisco wlc which I wanted to start using. Without your instructions, I couldn't have made this jump. Vielen Dank!

@ronnyrrr 2 жыл бұрын

love the videos pal - literally just finished watching several of your nginx proxy manager videos!

@christianlempa 2 жыл бұрын

Thank you so much :)

@pecasuy Жыл бұрын

Thank you for your time and knowledge, an invaluable help, especially because you turned something complex into a simple one, thank you, it has helped me a lot

@christianlempa Жыл бұрын

Thanks!

@Si0bart Жыл бұрын

Thanks for making this video, great explanation of how it all works, reassuring to see all the reading of separate info I've been doing was in a simple video.

@christianlempa Жыл бұрын

Thank you so much! ::)

@domenicoragosta2690 Жыл бұрын

Very great video! This was exactly what I've been looking for days and days. Very helpful. Thx! Keep it up

@christianlempa Жыл бұрын

Thanks, will do!

@jojojawjaw 6 ай бұрын

best explanation ever, thank you so much. for the first time, i actually understand ssl certs

@khaledbudajaja6137 10 ай бұрын

Your video came just in time to save my day. Didn't know i could be a CA as well create a SSL certificate. Amazing

@christianlempa 10 ай бұрын

Thanks! Glad you liked it :)

@IEnjoyCreatingVideos Жыл бұрын

Great video Christian! Thank you very much for sharing it with us!💖👍😎JP

@boronxxx Жыл бұрын

hey Christian! You just got a new subscriber man! Explained it beautifully!

@christianlempa Жыл бұрын

Welcome aboard! :D

@AkamiChannel 2 жыл бұрын

It is absolutely nuts how many subs you have now. Congrats man! I have been studying to get some certs lately so I'll see how it goes!

@christianlempa 2 жыл бұрын

Thank you so much :D I still know when we're following each other since the very beginning of this channel ;)

@albertoleo9529 2 жыл бұрын

Always great content! Re-watch it?? Not only, study it!! Absolutely interesting and useful. Thank you and keep on with this excellent content

@christianlempa 2 жыл бұрын

Thanks for the kind words

@youcancallmejoker340 Жыл бұрын

I autommatically press like when i see your videos. Awesome guy!!!!🙂🙂🙂🙂

@EliseuCaldeira Жыл бұрын

This was exactly what I was looking for. Helped a Ton! Thanks

@christianlempa Жыл бұрын

Thanks! Glad that it helped you :)

@richardwilliams9042 2 жыл бұрын

Thank you, this is just what I was looking for! Very helpful, great video!

@christianlempa 2 жыл бұрын

You're welcome 😀

@user-xi7kc1my6c 4 ай бұрын

Wow ... amazing !!! ... your step by step is exactly what I need ... and it's working A1 ... thank's for your generosity :)

@tadashitani 4 ай бұрын

Hi Christian, thank you for that video, it is exactly what I was looking for, followed your steps and it works perfectly. You got one more subscriber.

@christianlempa 4 ай бұрын

Thank you so much :)

@VertegrezNox 2 жыл бұрын

Thanks a ton! I have fond memories of adding SSL certificates to web 1.0 programs lol like deadAIM n such. Been really wanting to know more about its potential applications now adays. Appreciate the info. ~

@ScumbagLemon 6 ай бұрын

Finally a video that explains this process thoroughly, thank you

@jaxwylde2139 Жыл бұрын

Thanks for doing this. I watched it several times (and reviewed your very helpful 'Cheat-sheets' on git). I understand the process for setting up internal CA (with respective keys), as well as the signing request process. BUT, I'm still not sure how to go about creating certificates that have *wild-cards* for an IP range so that I can use more broadly in my home lab environment. I'll keep plugging away with some other how-to tutorials, and eventually I'll have the 'Eureka' moment and it'll all make sense. Nonetheless, your tutorial was very good and much appreciated. Cheers.

@aliounembodj-rj9uw Жыл бұрын

Really great, it's been a while since I was looking for this, i've implemented the same concept in Pfsense and made a web server to distribute the CA certificate to others devices

@christianlempa Жыл бұрын

Thanks :)

@rockbyrondelacruz9916 Жыл бұрын

Thank you so much. You just earned a subscriber here. Great content.

@mohammadshahabrafiq Жыл бұрын

Excellent video. Very informative. Good job.

@evkonoff 2 жыл бұрын

That's exaclty what I did when decide to move all my home network to SSL couple of weeks ago, glad to see we are on the same wave :)

@christianlempa 2 жыл бұрын

Oh cool, that's funny :D

@aniketteredesai 2 жыл бұрын

Thx for the fullchain tip. I had read about it in the Proxmox docs, but just the standalone cert worked for me :)

@christianlempa 2 жыл бұрын

Np bro! ;)

@MatthewOberlander 2 жыл бұрын

Very helpful, helped filled in some knowledge gaps in private CA's.

@christianlempa 2 жыл бұрын

Thx! Glad it was helpful ;)

@adminpyramid701 3 ай бұрын

Thanks bro @@christianlempa

@salkinxd 2 жыл бұрын

I had so many issues before trying to get SSL working on my VMware ESXI Server. Now I just used all the steps in this video and replaced the .csr file with the "Generate FQDN signing request" text (copied and put in a text file) that you can generate in ESXI. It instantly worked. Before this Video I "broke" my server so I couldn't access it from the webinterface anymore (had to plug in Monitor & Keyboard to find out that the SSL Certificate was invalid so the webserver didn't start). Thanks for making it this easy to follow👍

@christianlempa 2 жыл бұрын

Thanks, glad it was helpful 😀

@edgreenberg5090 11 ай бұрын

Very good explanations. The part I was looking for was how to import the ca certificate into the client devices.

@Clemens.Gooooo 11 ай бұрын

Thanks for this video, your documentation is amazing, it makes it very easy to follow your instructions and I now understand what's happening...

@christianlempa 10 ай бұрын

Thanks 🙏

@ghkpr 9 ай бұрын

Thanks for the great explanation!

@kaushmaisuria 2 ай бұрын

Thank you so much, very informative and has finally enabled me to get rid of the annoying warning message when logging into my nas. Great job!

@christianlempa 2 ай бұрын

Awesome! Thanks

@dazraf Жыл бұрын

Excellent presentation and content! Bravo and thank you!!

@christianlempa Жыл бұрын

Thanks!

@hamidullahmuslih6301 Жыл бұрын

You are awesome man! Very clean explanation

@christianlempa Жыл бұрын

Glad it helped!

@vivekwarjurkar6452 2 ай бұрын

I don't have enough words to thank you !!!!! You saved a life here..

@christianlempa 2 ай бұрын

Thank you! Glad you liked it 🫶

@sudhirkumarannapareddy2417 11 ай бұрын

Thank you for demystifying the concept! It helped a lot!

@sayenathn3664 2 жыл бұрын

Loved the video! And yes, please do a deep dive video as well 😇

@christianlempa 2 жыл бұрын

Thanks! :) Great idea, I like to do more videos about network protocols and security

@Facey1000 2 жыл бұрын

Thanks for the helpful video as always! 👍👍

@christianlempa 2 жыл бұрын

You're welcome :)

@colegannaway6263 8 күн бұрын

One of the best tutorials thanks!

@LawrenceSingha 2 жыл бұрын

This excellent and great video … yes! finally what I needed 👍🏼

@christianlempa 2 жыл бұрын

You're welcome!

@Berkshire-Hathaway 2 жыл бұрын

Thanks for your helpful videos!

@christianlempa 2 жыл бұрын

You're welcome! :)

@MATIFUSKA 10 ай бұрын

thank you, just a note , the file extfile.cnf has to be encoded in utf-8 , you can convert it via visual studio code , otherwise an error will show up "x509: Error on line 1 of config file "extfile.cnf" 8C520000:error:07000065:configuration file routines:def_load_bio:missing equal sign:crypto\conf\conf_def.c:513:HERE--> ■sline 1"

@hnwyheinrich 8 ай бұрын

THANKS! You can also use Notepad++ at the "Encoding" tab and save. But powershell script would be the simplest i think :/

@HanLok420 5 ай бұрын

Hello Matifuska, I am running into the same issue. Can you explain me how I encode it into utf-8? I used the Terminal of VS code, but how do I convert it into utf-8?

@HanLok420 5 ай бұрын

Okay I found it, on the bottom right of the window is it. In my case it was in UTF-16 LE, the change to UTF-8 solved it. Thank very much!

@aopen130 2 ай бұрын

Thank you. I was tearing my hair out looking for that error in search engine but it didn't help at all. Also, I did all this on Windows and give this error, but i tried again in debian/linux and it works out okay.

@d4rkd3v1l85 4 ай бұрын

thank you so much! finally found a working solution at first attempt

@reno.zed1 7 ай бұрын

Subscribed. I'm trying to keep my subscriptions list tidy, so take it as a massive compliment!

@christianlempa 7 ай бұрын

Thank you 😊

@claudiotonelli7709 6 ай бұрын

Your video is fantastic!! Compliment

@djraven68 11 ай бұрын

I love you man, you saved me days

@erinclaudio9211 Жыл бұрын

Thank you VERY much for making this video

@christianlempa Жыл бұрын

You’re welcome ☺️

@felixkuluchumila5262 Ай бұрын

Thanks Alot Father Christimas 😁😁

@Glitter_and_Sundog Жыл бұрын

I was searching to really solve this trusting issue puzzle for years by relying on Windows CA role and has been impossible. Endless gratitude to you !!!

@christianlempa Жыл бұрын

thx ;)

@georgewashington7251 9 ай бұрын

This is really helpful. Thank you.

@christianlempa 9 ай бұрын

you're welcome :)

@elalemanpaisa Ай бұрын

No worries, Christian I am very deep into encryption and you explained it just fine and it was not over simplified from a high level it was on point.

@christianlempa Ай бұрын

Thank you so much :)

@elalemanpaisa Ай бұрын

@@christianlempa thanks to you!! Entertaining content. My favourite YT Aleman ;-)

@yes-ni1od 5 ай бұрын

Thank you for splitting the video into segments, I already knew the basics and could just skip ahead to relevant parts.

@christianlempa 5 ай бұрын

You're welcome :)

@Glatze603 2 жыл бұрын

Hi Christian, endlich mal eine verständliche und funktionierende Anleitung, wie man selber Zertifikate für sein Homelab erstellen und einsetzen kann. Sehr gut, danke dir! Ich möchte an dieser Stelle auch noch einmal erwähnen, dass ich neben deinen Videoinhalten auch in besonderem Maße die Qualität deiner Videos (Sound, Bild, Schnitt, Lautstärke, Farben, Abstimmung, Präsentation, Darstellung, Stimmung etc.) zu schätzen weiß. Nach meinem Empfinden bildest du damit einen Standard, an den derzeit kaum jemand heran kommt. Weiter so. Uppps, jetzt habe ich doch instinktiv in deutsch geschrieben 🙂

@christianlempa 2 жыл бұрын

Vielen Dank! Freut mich, dass dir die Videos so gut gefallen, da du einer meiner langjährigen Zuschauer bist :D

@BellaNestCam 5 ай бұрын

@@christianlempa what ad blocker are you using? the new/blank web page shows 228,000 ads blocked and bandwidth saved. Thanks! and thanks for this video!!

@albuslrc Жыл бұрын

It works! Thanks! 😄

@ninjalabs_ 2 жыл бұрын

Ok but this is freaky. I was looking for a decent tutorial the whole of today and knew you mentioned it before but couldn't find it lol. At least I know where to look now

@christianlempa 2 жыл бұрын

Haha nice :D

@marcot.7893 2 жыл бұрын

Danke für das Video, das hat unser Problem gelöst

@christianlempa 2 жыл бұрын

Gerne! Freut mich dass es euch geholfen hat ;)

@zuryoav 3 күн бұрын

Thank you very much. Life saver.

@AmirBakhtiari-pw3yh Ай бұрын

such a great work. thanks!

@christianlempa Ай бұрын

Glad you liked it!

@romabilibov7612 Жыл бұрын

Thank you very much! You saved my day!

@christianlempa Жыл бұрын

You’re welcome ☺️

@KyleG384 2 жыл бұрын

Great content!

@christianlempa 2 жыл бұрын

Thx

@sh0Guun_ 6 ай бұрын

Thank you very much. You helped me a lot.

@christianlempa 6 ай бұрын

You're welcome :)

@FRITTY12348546 3 ай бұрын

thank you so much bro I was going around in circles until I got to this video

@christianlempa 3 ай бұрын

Glad it was useful! :D

@alikk3700 10 ай бұрын

Thank you, very helped for me

@lancebukkake 10 ай бұрын

very useful video, thank you very much

@Techtips200 2 жыл бұрын

well done ... please bring more stuff on this...

@christianlempa 2 жыл бұрын

thanks! I will ;)

@ernst367 2 жыл бұрын

Come in handy! Thank you!

@christianlempa 2 жыл бұрын

Thanks!

@djddavies 9 ай бұрын

Awesome work.

@christianlempa 9 ай бұрын

Thank you! Cheers!

@rodo2486 2 жыл бұрын

this channel is gold

@christianlempa 2 жыл бұрын

Thanks :D

@suzannevogt2018 2 жыл бұрын

Great video!

@christianlempa 2 жыл бұрын

Thx

@nob4131 10 ай бұрын

ICH BIN SO GLÜCKLICH DAAAANKE🎉❤❤❤❤❤❤

@pitkan1 5 ай бұрын

video was so good i had to smash like & subscribe

@christianlempa 5 ай бұрын

Thanks 😊

@marcello4258 2 жыл бұрын

In addition to this, if you are running Linux a self signed cert also helps you with signing your bootloader and enable secure boot properly ;) ..fun video always enjoy your passion with them!

@christianlempa 2 жыл бұрын

thanks mate ;)

@teddybear9152 2 жыл бұрын

Finally the answer to the most headache of running a home lab!

@christianlempa 2 жыл бұрын

Thank you :)

@alexfrance3646 2 жыл бұрын

Great video this. Thank you

@christianlempa 2 жыл бұрын

Thanks! You're welcome :)

@Nyemaster Жыл бұрын

Thank You so much!

@sanjeethg4958 Жыл бұрын

very informative content.

@christianlempa Жыл бұрын

Thank you! ;)

@hooktest8101 2 жыл бұрын

thanks a lot for the amazing video

@christianlempa 2 жыл бұрын

You're welcome :)

@kudasol 9 ай бұрын

Thank you so much 🙏🙏

@salmanraza5223 Жыл бұрын

Excellent!

@christianlempa Жыл бұрын

Thx :)

@justingreen6561 Жыл бұрын

Just trying to mind my own business, watch this vid and learn some stuff when at 1:43...are those Bishop boulders/ Eastern Sierras I see?? Way to win the 'like' smash before the lesson even starts! 🙂 Even if they aren't, great shot/pebbles nonetheless...alright, now time to learn!