Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== PFSense - Certificates - Create a Server Certificate ======

A Server certificate (SSL certificates) is used to authenticate the identity of a server.

----

===== Create the Server Certificate =====

Navigate to **System -> Cert Manager**.

  * Select the **Certificates** tab and create a Server Certificate by pressing the **“+”** button.

In **Add/Sign a New Certificate**:

  * Method: **Create an Internal Certificate**.
  * Descriptive Name: **ShareWiz OpenVPN**.

In **Internal Certificate**:

  * Certificate authority:  **ShareWiz OpenVPN CA**.
  * Key Type: **RSA**.
  * Key length: **2048 bit**.
  * Digest Algorithm:  **SHA 256**.
  * Lifetime: 397. **(1 year)**.
  * Common Name: **ShareWiz - OpenVPN CA**.
  * Country Code: **JE**.
  * State or Province: **<blank>**.
  * City: **St. Helier**.
  * Organization: **ShareWiz**.
  * Organizational Unit: **<blank>**.


In **Certificate Attributes**:

  * Certificate Type: **Server Certificate**.
  * Alternative Names: **<blank>**.

<WRAP info>
**NOTE:**  Lifetime.

  * New TLS certificates will be limited to 398 days, a little over a year (13 months).
  * In a move that is meant to boost security, Apple, Google, and Mozilla reject publicly rooted digital certificates in their respective web browsers that expire more than 13 months (or 398 days) from their creation date.
  * To avoid unintended consequences, it is recommended that certificates be issued with a maximum validity of 397 days.

</WRAP>
----