Generate a Self-Signed HTTPS Certificate

Generate Self-Signed ATKey.Login & AuthFi Certificates

Both ATKey.Login & AuthFi servers need HTTPS certificates in order to function. For a testing or local environment, a self-signed certificate can be used. If you are new to self-signed certificates here you can find how to generate one.

IMPORTANT. Self-signed certificates can only be used in a local environment. If you plan to deploy your infrastructure in a non-local environment you will need to use one of the other methods to obtain your certificate.

  • Create a configuration file (san.cnf).
    Substitute the values in the following example with the one that match your server.

[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no

[req_distinguished_name]
C = TW
ST = Taipei
L = Taipei
O = MyCompany
OU = IT
CN = authfi.example.org

[v3_req]
keyUsage = keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names

[alt_names]
DNS.1 = authfi.example.org

  • Generate the Private Key and Certificate

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
  -keyout authfi.key \
  -out authfi.crt \
  -config san.cnf \
  -extensions v3_req

  • Verify the certificate

openssl x509 -in authfi.crt -text -noout | grep -A 1 "Subject Alternative Name"