Self Signed wildcard certificate using keytool

[AK_10025845]

Hello All,

I would like to know how we can generate the Self Signed Wildcard certificate using the keytool utility? If not possible through keytool, is there any other way using which we can generate the Self signed Wildcard certificate?

Thanks,

Avinash

[HelesicPetr]

Hi @AK_10025845 

Have you try this article? https://www.sslshopper.com/article-how-to-create-a-self-signed-certificate-using-java-keytool.html

PetrH

[AK_10025845]

Hi @HelesicPetr 

Thanks for your reply.

From the shared Article and as per below snapshot, do we need to enter domain details in First and Last name?

e.g., CN=*.abc.com

Regards,

Avinash

[HelesicPetr]

If you generate certificate for some address you need to define full address. 

So yes you also need to use domain address

PetrH

[AK_10025845]

Hi @HelesicPetr , I wanted to generate self signed certificates for Replica sites. As there are more than 10 replica sites in my case, I thought it would be better to generate a single Wildcard certificate instead of generating the certificate for each replica site and then importing all those certificates to Master's keystore.

So using this keytool command, will I be able to generate that Wildcard certificate (and not the certificate specific to only one site/server).

Thanks.

[HelesicPetr]

@AK_10025845 

I don't think so you can do it with self-sing cert.

I may be wrong.

PetrH

[jbailey]

https://www.brainbytez.nl/tutorials/linux-tutorials/create-a-self-signed-wildcard-ssl-certificate-openssl/

Looks like you have to modify the .cnf file to be able to do it