Create and consume Self-Signed Certificates on Linux (Certificate and private key)

Prerequisite

1. Running in this projects devcontainer
2. Create a folder in the root of the project named: 'certs'
3. Update hostfile. Add.: 127.0.0.1 localhost # Or your projects IP and host name eg. 123.55.13.129.0.2 mydomain.ninja

Create Self-Signed Certificate using 'openssl'

Create with password:

bash#> openssl req -x509 -newkey rsa:4096
-keyout certs/linux-test-private-key.pem
-out certs/linux-test-cert.pem -days 365
-subj '/CN=localhost'
-addext "subjectAltName = DNS:letsgo.out, DNS:localhost, IP:127.0.0.1"

Example

root@03437dd68dcc:/workspaces/LinuxTest# openssl req -x509 -newkey rsa:4096
-keyout certs/linux-test-private-key.pem
-out certs/linux-test-cert.pem -days 365
-subj '/CN=localhost' Generating a RSA private key .........................................................++++ .............................................................................................................................................++++ writing new private key to 'certs/linux-test-private-key.pem' Enter PEM pass phrase: Verifying - Enter PEM pass phrase:

root@03437dd68dcc:/workspaces/LinuxTest#

Here I used the pass phrase: helloworld

Create Self-Signed Certificate - Stored as PFX

PFX

Contains both the private-key and the public key certificate

Create PFX from PEM

openssl pkcs12 -inkey certs/linux-test-private-key.pem -in certs/linux-test-cert.pem -export -out certs/my-dev.pfx

Example

root@c184ec327a2c:/workspaces/LinuxTest# openssl pkcs12 -inkey certs/linux-test-private-key.pem -in certs/linu x-test-cert.pem -export -out certs/my-dev.pfx Enter pass phrase for certs/linux-test-private-key.pem: Enter Export Password: Verifying - Enter Export Password:

Create Self-Signed Certificates using 'dotnet dev-certs'

Create root@03437dd68dcc:/workspaces/LinuxTest# dotnet dev-certs https --export-path ./certs/my-dev-cert.pfx --password helloworld The HTTPS developer certificate was generated successfully

(The development certificate is stored within a platform-dependent certificate store)

List certs root@03437dd68dcc:/workspaces/LinuxTest# dotnet dev-certs https A valid HTTPS certificate is already present.dotnet dev-certs https

Clean root@03437dd68dcc:/workspaces/LinuxTest# dotnet dev-certs https --clean HTTPS development certificates successfully removed from the machine.dotnet dev-certs https --clean

Consume PEM in .NET

application.Pem.json

{
  "Kestrel": {
    "EndPoints": {
      "Https": {
        "Url": "https://localhost:5001",
        "Certificate": {
          "Path": "../certs/linux-test-cert.pem",
          "KeyPath": "../certs/linux-test-private-key.pem"
        }
      }
    }
  }

Relative Paths:

The paths ../certs/linux-test-cert.pem and ``../certs/linux-test-private-key.pem` are relative to the working directory from which the application is run, which may or may not be the project root, depending on how you launch the application.

Consume PFX in .NET

application.Pfx.json

{
  "Kestrel": {
    "EndPoints": {
      "Https": {
        "Url": "https://localhost:5001",
        "Certificate": {
          "Path": "../certs/my-dev.pfx",
          "Password": "helloworld"
        }
      }
    }
  }
}