SSL tips

Creating a pem bundle (haproxy cert format)

cat certificate.crt intermediates.pem private.key > ssl-certs.pem

Create a self sign certificate in one command

Don’t forget to replace <Your Cert Name> and <yourdomain>

openssl req -x509 -newkey rsa:4096 \
-sha256 -days 3560 -nodes -keyout example.key \
-out example.crt -subj '/CN=' \
-extensions san -config <( echo '[req]'; \ 
echo 'distinguished_name=req'; echo '[san]'; \ 
echo 'subjectAltName=DNS:localhost,')

Show information for a local certificate

openssl x509 -in certificate.crt -noout -text