SSL certificate

If you already have a certificate, skip this.

​​ Self-signed certificate

Use a self-signed certificate if you are deploying locally.

​​ Ubuntu

There is a pair of self signed certificate and key on all ubuntu installations.

/etc/ssl/certs/ssl-cert-snakeoil.pem
# cert
/etc/ssl/private/ssl-cert-snakeoil.key
# key

​​ Generate a pair of certificate and key

• install openssh

sudo apt install openssh
# ubuntu

sudo pacman -Sy openssh
# arch

• generate certificate and key

$ sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/selfsigned.key -out /etc/ssl/certs/selfsigned.crt
# generate certicate and key using openssh

Certificate:

/etc/ssl/certs/selfsigned.crt

Key:

/etc/ssl/private/selfsigned.key

​​ Let’s encrypt

Let’s encrypt is a free certificate service.

Please follow the configuration for let’s encrypt Open external link at conf , then see letsencrypt .