Create Your Own SSL Certificate Authority (Windows)

$ winpty openssl rep -x509 -new -nodes -key myCA.key -sha256 -days 1825 -out myCA.pem
Invalid command 'rep'; type "help" for a list.

Any advice?

Shoutout to the Lake Morraine wallpaper

It's a shame that the OpenSSL is not officially supported on Windows. For both OpenSSL Team and Microsoft. And it's shame that you can't easily create a CA with a certmgr tool. But I found that you can install and configure some Active Directory and it has CA tools where you can sign CSRs. Still it will be easier to use the console OpenSSL.
BTW the git for Win uses old OpenSSL v1 while there is OpenSSL v3 and some commands are differ a little bit. So you can copy some command from a tutorial and it will fail with some weird error.
I had this problem with -noenc flag that in the v1 was called -nodes. It's again a fail of the OpenSSL Team who removed the option without just deprecating it.
Another one confusing thing is that all tutorials, including your, are generating RSA keys while there is newer and faster ECC.
Thank you for the helpful tutorial, it was pleasure to watch and heard you👌

But, you didn't show HOW to generate it, just import?

at the end there you left me hanging. i am running iis, not apache and not ngnx

Spend more than 20 hours to generate certificate for my localhost site, still failed, video does not help. My certificate does not appear in Trusted root, the further command... not understand what I'm doing totally...

Nice video right up til the end when you just handwaved how you actually use the things we just created with a link to a site that doesn't explain it properly either :(

very helpful Video Thankyou

teaching is not your thing

this thing is not working at all

How do it create the x509 extension file?

copied exactly from the video keep getting unrecognised command tryed to move the \ to / or removing it nothing seems to work have even removed altogether plus the -help dose not list the \ as a parameter. please help with this

the x509 command line is not working at the \ -CAcreateserial command

Thank you so much