@@KrishSanj Do you have a video on how to use or trust a server cert on the client side? I know the server needs to actively trust the CA cert by adding it to its trust store, but after that, what comes next? Just add the CA Cert also to client-side trust store seems kind of obvious, but does some client cert need to be generated and provided to server?
Thanks for the video, had to watch a few and ask AI about the code. The below may help people that watch as I wasted a lot of time Waste a lot of time on badly documented ssl and missed out discussion of code by lots of videos. THIS video may help understanding of SSL. ua-cam.com/video/T4Df5_cojAs/v-deo.html XAMMP setup ua-cam.com/video/eqrDHkIFe8U/v-deo.html One set code: openssl req -new -nodes -out server_req_privatekey.csr openssl rsa -in privkey.pem -out server_priv_key.pem openssl x509 -in server_req_privatekey.csr -out server_signed.crt -req -signkey server_priv_key.pem -days 3650 Other code: openssl req -x509 -nodes -newkey rsa:4096 -days 3650 -keyout ca-priv_key.pem -out ca_pub_key.pem openssl req -nodes -newkey rsa:4096 -days 3650 -keyout server_priv_key.pem -out server_pub_req.csr openssl x509 -req -in server_pub_req.csr -CA ca-pub_key.pem -CAkey ca-priv_key.pem -days 3650 -Cacreateserial -out server_signed_cert.crt Code 3: openssl genrsa -out server_priv_key.pem 4096 openssl req -new -key server_priv_key.pem -sha256 -out server_req.csr openssl x5099 -req -days 350 -in server_req.csr -signkey server_priv_key.pem -sha256 -out server_signed.crt (modify 1st for passphrase openssl genrsa -des3 -out server_priv_key.pem 4096) Other videos watched: ua-cam.com/video/degTCVeAvLs/v-deo.html
appreciate your feedback. sorry that it did not help you. But I am doing this as a hobby and google Adsense was not my primary intention. You see when this channel was created, in 2006. since then I would have grown big, if my intention was only about AdSense. hope my other work helped you and others
Hi, Appreciate your feedback, But I have clearly said what tool I am using, and it should work on most of the Linux distro. Let me know if you still not getting it, need any info
Hi Krishna, thanks for your video. I followed your video, but my serial number is in hex form and I didn't get the srl file
Excellent thanks..helped to address cert renewal
could you give the link for the notepad file where you have written the commands
Can we use it on localhost development mode in Ruby on Rails projects?
It can be. But it depends on the keystore/certificate store are managed
Hello man, great video
I just have a question when i have to place the path of my private an public key I need the chain.pem how to I get that file?
can you elaborate please
@@KrishSanj Do you have a video on how to use or trust a server cert on the client side? I know the server needs to actively trust the CA cert by adding it to its trust store, but after that, what comes next? Just add the CA Cert also to client-side trust store seems kind of obvious, but does some client cert need to be generated and provided to server?
Nicely explained. thanks.
Thanks for the video it helped me a lot.
how to apply this on website?
you should be domain admin
domain manager like GoDaddy will have option
check my new video
Where I get 1s -1tr symbol (~ like state)
did not get
can I apply this on Sip sys?
I am not sure about the SIP sys. Self signed certificates are to test internal dev activity.
@@KrishSanj sir ,plz how to decrypt sip over TLS v1.2 by Wireshark ? TLS CA created by openssl ..
Thanks for the video, had to watch a few and ask AI about the code. The below may help people that watch as I wasted a lot of time
Waste a lot of time on badly documented ssl and missed out discussion of code by lots of videos.
THIS video may help understanding of SSL. ua-cam.com/video/T4Df5_cojAs/v-deo.html
XAMMP setup ua-cam.com/video/eqrDHkIFe8U/v-deo.html
One set code:
openssl req -new -nodes -out server_req_privatekey.csr
openssl rsa -in privkey.pem -out server_priv_key.pem
openssl x509 -in server_req_privatekey.csr -out server_signed.crt -req -signkey server_priv_key.pem -days 3650
Other code:
openssl req -x509 -nodes -newkey rsa:4096 -days 3650 -keyout ca-priv_key.pem -out ca_pub_key.pem
openssl req -nodes -newkey rsa:4096 -days 3650 -keyout server_priv_key.pem -out server_pub_req.csr
openssl x509 -req -in server_pub_req.csr -CA ca-pub_key.pem -CAkey ca-priv_key.pem -days 3650 -Cacreateserial -out server_signed_cert.crt
Code 3:
openssl genrsa -out server_priv_key.pem 4096
openssl req -new -key server_priv_key.pem -sha256 -out server_req.csr
openssl x5099 -req -days 350 -in server_req.csr -signkey server_priv_key.pem -sha256 -out server_signed.crt
(modify 1st for passphrase openssl genrsa -des3 -out server_priv_key.pem 4096)
Other videos watched:
ua-cam.com/video/degTCVeAvLs/v-deo.html
Sir how can I setup or give the ssl at my own website ??
Sir pls tell
what is the server? check my latest video on how to use it on Apache server
dude or someone could put the steps in txt format?
It suppose to be on my blog. i will check and update in few days
thanks for the video. However, I get this error. Can you please advise
-----END ENCRYPTED PRIVATE KEY-----
.
Error: Invalid private key ...discarding.
Hello Krishna, could you please share those commands...
check my latest video on this topic. it has simplified stpes
can you check this www.krishtalk.com/2022/06/how-to-self-signed-ssl-certificate-and.html
Another half baked cake to elevate your confusion to next higher level... Keep it up youtube bakers to make money by google ads...
appreciate your feedback. sorry that it did not help you. But I am doing this as a hobby and google Adsense was not my primary intention. You see when this channel was created, in 2006. since then I would have grown big, if my intention was only about AdSense.
hope my other work helped you and others
Thanks
nm
here is how to use self signed SSL in your website on Apache server
ua-cam.com/video/mSt-7o2rhL0/v-deo.html
👍😉
you dont explain what operating system you are using and you do not explain what that software is either, therefore dislike
Hi, Appreciate your feedback, But I have clearly said what tool I am using, and it should work on most of the Linux distro. Let me know if you still not getting it, need any info
@@KrishSanj Works on windows aswell