Example of a self-signed certificate

In this repository, I suggest looking at options for working with self-signed certificates. If you find any errors or want to suggest an improvement, please, make an issue in a current repository

Requirements

• Docker version 25.0.5

Quick guide

0. Copy env and build openssl image

   cp .env.example .env
   make openssl-build-image

1. Create root certificate chain, server certificate, user certificates and configuration for nginx

   make step-create_all_certs-and-nginx_configs step-run_nginx

   

2. Run tests to check HTTPS and connections with the client certificate

   make step-run_tests

   

3. Check links in browser

• https://localhost/
• https://localhost/protection-magic/
  

4. Import intermediate CA

   macOS

   make import-macos-ca CA_NAME=intermediate.level_2.root.ca

5. Check links in browser

• https://localhost/
  
• https://localhost/protection-magic/
  

6. Import client certificates

   macOS

   make import-macos-client CA_NAME=intermediate.level_2.root.ca CLIENT_EMAIL=user_1@lol.kek
   make import-macos-client CA_NAME=intermediate.level_2.root.ca CLIENT_EMAIL=user_2@lol.kek

7. Re-enter the OS profile so that the system selects user certificates

8. Run nginx

   make step-run_nginx

9. Check links in browser incognito mode

Important

Remember, if you want to change the user certificate, you need to restart the browser

• Don't select a user
  • https://localhost/
    
  • https://localhost/protection-magic/
    
• Select user_1 - this user's certificate has been revoked, so any page will return a 400 Bad Request
  • https://localhost/
  • https://localhost/protection-magic/
    
• Select user_2 - this user's certificate is active
  • https://localhost/
    
  • https://localhost/protection-magic/
    

10. Now in the OS settings we will see the following certificates

    macOS

    1. open keychain
       
    2. certificates
       
    3. keychains
       

---

Task lists

• Add import commands for Windows and Linux
• Add documentation
• Add openssl OCSP example