mkdir certs

windows-only?: add to certs/cfg: ------------------------ [ req ] default_bits = 1024 default_keyfile = certs/key.pem distinguished_name = req_distinguished_name

[ req_distinguished_name ] countryName = Country Name (2 letter code) countryName_default = RU countryName_min = 2 countryName_max = 2

localityName = Locality Name (eg, city) organizationName = Organization Name(eg, org) organizationalUnitName = Organizational Unit Name (eg, section)

commonName = Common Name (eg, YOUR name) commonName_max = 64

emailAddress = Email Address emailAddress_max = 40 ------------------------- for non-windows delete -config certs/cfg : #openssl req -new -x509 -out certs/cert.pem -config certs/cfg

openssl genrsa -des3 -out certs/key.pem openssl req -new -key certs/key.pem -out certs/cert.pem -config certs/cfg

debug: openssl s_server -accept 413 -cert certs/cert.pem -key certs/key.pem openssl s_client -debug -connect 127.0.0.1:413