Need instructions for generating self signed certificates

StefanZ

I would like to have certificates on my Zyxel devices that cover more than one IP address.

So basically openSSL plus "add more SubjectAlt fields".

Since I am no expert on SSL / openSSL (but then who really is?), I was wondering if anyone else has done this already and can share their code?

All those options and formats make me dizzy – any cert / key I uploaded via FTP got deleted by the Flex50 instantly…

I am on OSX, so openSSL is the weapon of choice, but I also have other boxes running.

WJS

Create CSR first and generate a CRT by openssl.

Not sure firewall block if CRT have multiple SAN.

But You can try import certificate in object→Certificate with following CRT format,

• Binary X.509
• PEM (Base-64) encoded X.509
• Binary PKCS#7
• PEM (Base-64) encoded PKCS#7
• Binary PKCS#12