Create OpenSSL certificate

Most of this article is correct:

http://blog.darkthread.net/post-2013-05-17-iis-ssl-cert-by-openssl.aspx

Fixed:

  1. Need to create both index.txt and index.txt.attr
  2. If keep getting “Invalid type in ‘policy’ configuration”, replace “policy = policy_match” with “policy = policy_anything”

Important commands:

cd C:\OpenSSL-Win32\bin

set OPENSSL_CONF=C:\OpenSSL-Win32\bin\openssl.cfg

openssl req -new -x509 -days 3650 -extensions v3_ca -keyout PEM/wikirex/private/cakey.pem -out PEM/wikirex/cacert.pem

openssl ca -out iisCert.pem -in certreq.txt

Reference: