Here’s a very quick guide on creating ECC 256Bit Self-Signed Certificates with OpenSSL and Ubuntu 12 and 14.
1. Firstly lets create a folder to hold the files..
|
1 |
mkdir /etc/ssl/ecc |
2. Move to that directory…
|
1 |
cd /etc/ssl/ecc |
3. Now lets create the key
|
1 |
openssl ecparam -genkey -name prime256v1 -out ecc.key |
4. Create the request
|
1 |
openssl req -new -key ecc.key -out ecc.csr |
5. Create the certificate
|
1 |
openssl x509 -req -days 365 -sha256 -in ecc.csr -signkey ecc.key -out ecc.crt |
6. While we are here, lets combine the private key and certificate into a .pem file.
|
1 |
cat ecc.key ecc.crt > ecc.pem |
You now have a Self-Signed ECC 256Bit SHA256 certificate for your domain, and a .csr file for use at your favourite CA.
Should you wish to have ECC 384 Bit, simply replace “prime256v1” in step three, with secp384r1,
and “-sha256” in step five with -sha384.
Enjoy!