Need instructions for generating self signed certificates

StefanZ
StefanZ Posts: 202  Master Member
First Comment First Answer Friend Collector Second Anniversary
in Security

I would like to have certificates on my Zyxel devices that cover more than one IP address.

So basically openSSL plus "add more SubjectAlt fields".

Since I am no expert on SSL / openSSL (but then who really is?), I was wondering if anyone else has done this already and can share their code?

All those options and formats make me dizzy – any cert / key I uploaded via FTP got deleted by the Flex50 instantly…

I am on OSX, so openSSL is the weapon of choice, but I also have other boxes running.

All Replies

  • WJS
    WJS Posts: 156  Master Member
    5 Answers First Comment Friend Collector Third Anniversary
    edited July 2023

    Create CSR first and generate a CRT by openssl.

    Not sure firewall block if CRT have multiple SAN.

    But You can try import certificate in object→Certificate with following CRT format,

    • Binary X.509
    • PEM (Base-64) encoded X.509
    • Binary PKCS#7
    • PEM (Base-64) encoded PKCS#7
    • Binary PKCS#12

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）