วิธีสร้าง SSH Public Key และ Private Key เพื่อใช้ในการ login SSH

Create CA and SSL Certificate

# Create private key:
openssl genrsa -aes256 -out ca-key.pem 4096

# Create certificate from private key:
openssl req -new -x509 -sha256 -days 3650 -key ca-key.pem -out ca.pem

# Create certificate key for ssl:
openssl genrsa -out cert-key.pem 4096

# Create Certificate Signing Request (CSR)
openssl req -new -sha256 -subj "/CN=CommonName" -key cert-key.pem -out cert.csr

# Create Extension File for domain and ip address
echo "subjectAltName=DNS:server.local,IP:192.168.1.200" >> extfile.cnf

# Create Certificate from CSR and CA and Extension File
openssl x509 -req -sha256 -days 3650 -in cert.csr -CA ca.pem -CAkey ca-key.pem -out cert.pem -extfile extfile.cnf -CAcreateserial

# Crate Fullchain Certificate
cat cert.pem ca.pem > fullchain.pem

# Install SSL certificate on web server by using cert-key.pem and fullchain.pem

Install CA to Client

Windows (powershell)

Import-Certificate -FilePath "C:\ca.pem" -CertStoreLocation Cert:\LocalMachine\Root

Windows (Command Prompt)

certutil.exe -addstore root C:\ca.pem

Debian

# Move the CA certificate (`ca.pem`) into `/usr/local/share/ca-certificates/ca.crt`.
# Update the Cert Store
sudo update-ca-certificates

Android

1. Open Phone Settings
2. Locate Encryption and Credentials section. It is generally found under Settings > Security > Encryption and Credentials
3. Choose Install a certificate
4. Choose CA Certificate
5. Locate the certificate file ca.pem on your SD Card/Internal Storage using the file manager.
6. Select to load it.
7. Done!

Convert pem to crt

openssl x509 -inform PEM -in ca.pem -out certificate.crt