Openssl For Free From StartSSL
Openssl Mac OSX OpenSSL On
Openssl Mac And Linux

HTPC Guides is not responsible for content from any other site or provider.

I needed SSL certificates for use with reverse proxies for Sabnzbd, NZBGet, Sonarr, SickRage, CouchPotato and others.

Openssl Mac And Linux

I managed to get OpenSSL generating certificates on Windows, Mac and Linux so I have consolidated them all into this guide as opposed to making separate posts feedback on whether this was a good idea or not is welcome in the comments.

Generate OpenSSL Certificates for nginx I will assume you have already installed nginx already.

If you havent you can use this Windows, Mac or Linux guide though you can also install it on Mac with Homebrew which is much easier, however the paths will be different and you will have to adjust them accordingly in this guide.

Openssl For Free From StartSSL

This guide does not help you create SSL certficates from a Certified Authority so you will get warnings that the SSL certificate is not trusted however, there is no reason not to trust a certificate that you have created yourself However if you do want an official certificate you can get one for free from StartSSL that you will have to renew each year.

OpenSSL on Windows You will need the VC 2008 redistributable for Windows Win32 OpenSSL or Win64 OpenSSL light.

The 32-bit version runs fine on 64-bit machines and is used for this guide.

Openssl Mac OSX OpenSSL On

If you dont plan on using OpenSSL again then choose for the dll files to be installed to bin OpenSSL on Mac OSX OpenSSL on Mac is done in the Terminal, we need to install x-code utilities and Homebrew in order for OpenSSL to be installed.

You can find Terminal in Applications - Utilities Now Scroll down to Terminal and open it The Mac Terminal is white.

In Terminal, install the command line tools xcode-select --install You will get a pop up asking to install command line tools.

Click Install. If it says it couldnt be found then you already have command line tools installed Install Homebrew Run the Terminal and enter this command ruby -e (curl -fsSL ) Run homebrew doctor as the installation says brew doctor Now install openssl using Homebrew for Mac brew install openssl OpenSSL on Linux On Linux it couldnt be easier, this works on Debian, Ubuntu, Raspbian and should work on any debian based system sudo apt-get install openssl -y Create the SSL Certificate with OpenSSL A quick explanation about the best encryption.

We will be using RSA which is also a respectable encryption method.

Open a command prompt for Windows or terminal for Mac and Linux On Linux or Mac create an SSL directory sudo mkdir -p etcnginxssl Now to create the actual SSL certificates, it will last 36500 days and have rsa 2048 bit encryption.

The nodes switch means we dont have to enter the server keys password each time you connect to the nginx web server.

Create the certificate and key on Linux or Mac sudo openssl req -x509 -nodes -days 36500 -newkey rsa:2048 -keyout etcnginxsslnginx.key -out etcnginxsslnginx.crt If on Windows the command is almost identical, only the paths are different Create nginx Windows SSL certificate openssl req -x509 -nodes -days 36500 -newkey rsa:4096 -keyout nginx-1.6.2confnginx.key -out nginx-1.6.2confnginx.crt You will see this error if you did not run the command prompt as an administrator in Windows or if the folder you are attempting to create the files in does not exist.

What you are about to enter is what is called a Distinguished Name or a DN.

Organization Name (eg, company) Internet Widgits Pty Ltd: HTPC Guides.

Common Name (e.g.

Email Address: adminhtpcguides.com Now you can actually configure nginx to use the SSL certificates Configure nginx with SSL Configure nginx to use SSL with Mac and Linux Open the Linux nginx configuration file, adjust reverse if your file is different sudo nano etcnginxsites-availablereverse On Mac following my nginx installation guide open the configuration file which should be in one of these locations, the 2nd is for nginx installation using homebrew sudo nano usrlocalnginxconfnginx.conf.

When you do open it you will see some warnings which you have to click past.

The reason you get these warnings is because you created the certificate yourself and did not acquire it from a Certified Authority (CA).

This is how to store the certificates you just created in your browser so the warning disappears for your personal site.

If you ever get this warning when trying to visit a commercial website you should check your computer for viruses and malware.

Download Openssl For Mac