Setting up a trusted, self-signed SSL/TLS certificate authority in Linux

With OpenSSL, it’s pretty easy to generate a simple self-signed TLS certificate . Just run the following command: 1 openssl req -x509 -newkey rsa:4096 -sha256 -days 365 -nodes -keyout cert.key -out cert.crt The files that this command generates, cert.key and cert.crt , could be passed to a web server, for example, and it will work fine; that is, all the connections made to that web server will be…