{"id":9963,"date":"2024-07-23T10:37:18","date_gmt":"2024-07-23T10:37:18","guid":{"rendered":"https:\/\/www.ssdnodes.com\/?p=9963"},"modified":"2025-05-15T15:30:03","modified_gmt":"2025-05-15T15:30:03","slug":"create-a-self-signed-certificate-on-ubuntu-for-apache-and-nginx","status":"publish","type":"post","link":"https:\/\/www.ssdnodes.com\/blog\/create-a-self-signed-certificate-on-ubuntu-for-apache-and-nginx\/","title":{"rendered":"How to Create a Self-Signed Certificate on Ubuntu 24.04 for Apache and Nginx"},"content":{"rendered":"

The last thing you want is to have your sensitive data hijacked because of bad web security practices. That's why you absolutely must create a self-signed certificate on your Ubuntu 24.04 VPS for your Apache or Nginx server.<\/p>\n

Securing your web traffic with SSL\/TLS encryption to handle HTTPS<\/a> communications is an essential part of building any public or private web service, because without it, your web service will have weak privacy and insecure data transfer, and users won\u2019t trust your services.<\/p>\n

\"Create<\/p>\n

Why Create a Self-Signed Certificate on Ubuntu?<\/h2>\n

Once you create a self-signed certificate on Ubuntu, SSL\/TLS encryption will protect your data transfer and prevent sensitive data exposure, in addition to ensuring that the connection is between the correct entities by cryptographically verifying that you\u2019re connecting with an authentic server, and that the messages have not been interfered with while being transferred.<\/p>\n

Note:<\/strong> From now on we will refer to SSL\/TLS certificates as simply \"SSL certificates\" for brevity.<\/p>\n

How to Create a Self-Signed Certificate on Ubuntu<\/h2>\n

To create a self-signed certificate on Ubuntu, you'll need to use OpenSSL to generate a private key and a self-signed certificate, specifying the required details like the certificate's validity period and your organization's information. Next, you'll save the key and certificate files in a secure location, and then use it in your Apache or Nginx server configuration.<\/p>\n

(Special Offer) - Simplify Your SSL Setup with Our 1-Click VPS Applications<\/h3>\n

If generating a self-signed SSL certificate sounds daunting, we've got you covered. Our 1-Click VPS applications<\/a> (WordPress<\/a>, phpMyAdmin<\/a>, LAMP<\/a>, and LEMP<\/a>, and many others) come with a pre-installed self-signed SSL certificate. Just a few clicks and you're ready to go! Visit our website<\/a> to get started with the lowest-cost VPS offerings in the world (self-signed certificates included)!<\/p><\/blockquote>\n

Step 1 - Using OpenSSL to Generate a Self-Signed Certificate<\/h2>\n

To create a self-signed certificate on Ubuntu, you will use OpenSSL to generate a certificate file that will store some basic information about your site, accompanied by an SSL private key file that will be kept secret in the server, and the server then will use it to securely handle encrypted data.<\/p>\n

OpenSSL is a software library that provides tools for general-purpose cryptography and secure communications.<\/p>\n

The private SSL key is used by the server to encrypt the content it sends to clients (e.g., web browser) The public SSL certificate is shared publicly with clients requesting the content. So when you request a page, the browser gets the SSL certificate from the server, and uses it to decrypt and access the content signed by the associated private SSL key.<\/p>\n

The first step to obtaining an SSL certificate is using OpenSSL to create a certificate signing request (CSR). In normal cases, the CSR will be sent to the Certificate Authority (CA) which in turn will create a certificate based on it. In our case (self-signed certificate), we will create the certificate ourselves based on this CSR we generate using OpenSSL. The CSR contains the common name(s) you want your certificate to secure, information about your company, and your public key.<\/p>\n

\"Create<\/p>\n

Note:<\/strong> In order for a CSR to be created, it needs to have a private key from which the public key is extracted. This can be done by using an existing private key or generating a new private key. It is strongly recommended to generate a new private key when creating a CSR instead of using an existing one.<\/p>\n

To create a certificate signing request (CSR) and a private key with the openssl<\/code> library, you will use the openssl req<\/code> command with the following command structure:<\/p>\n

openssl req -x509 -newkey rsa:<rsa_value> -nodes -out <public certificate path> -keyout <private key path> -days <certificate duration in days> -subj \"C=<country code>\/O=<organization name>\/OU=<organizational unit>\/CN=<common name>\"<\/code><\/pre>\n
Here is what each part of the preceding command means:<\/p>\n