참고

  1. Create unencrypted private key and a CSR (certificate signing request)
openssl req -newkey rsa:2048 -nodes -keyout localhost.key -out localhost.csr
  1. Create self-signed certificate (localhost.crt) with the private key and CSR
openssl x509 -signkey localhost.key -in localhost.csr -req -days 36500 -out localhost.crt
  1. Create a self-signed root CA
openssl req -x509 -sha256 -days 36500 -newkey rsa:2048 -keyout rootCA.key -out rootCA.crt
  1. localhost.ext 생성