User avatar admin

Resource updated
Parsing of the “doc/qbk/03_core/9_ssl_tls_certificate.qbk” file was enforced. 06/05/2026
User avatar admin

Resource updated
File “doc/qbk/03_core/9_ssl_tls_certificate.qbk” was added. 06/05/2026
User avatar admin

String added in the repository
Also, you can use the client example: [path_link example/doc/ssl/client.cpp client.cpp]
Also, you can use the client example: [path_link example/doc/ssl/client.cpp client.cpp]
06/05/2026
User avatar admin

String added in the repository
``` curl https://localhost:8080 --cacert ca.crt --cert client.crt --key client.key ```
``` curl https://localhost:8080 --cacert ca.crt --cert client.crt --key client.key ```
06/05/2026
User avatar admin

String added in the repository
You can test the server using this cURL command:
You can test the server using this cURL command:
06/05/2026
User avatar admin

String added in the repository
Note that the server is configured in such a way that it requests and verifies the client certificate. You can disable this by commenting out the related line in the example.
Note that the server is configured in such a way that it requests and verifies the client certificate. You can disable this by commenting out the related line in the example.
06/05/2026
User avatar admin

String added in the repository
Server example: [path_link example/doc/ssl/server.cpp server.cpp]
Server example: [path_link example/doc/ssl/server.cpp server.cpp]
06/05/2026
User avatar admin

String added in the repository
``` openssl dhparam -out dh4096.pem 4096 ```
``` openssl dhparam -out dh4096.pem 4096 ```
06/05/2026
User avatar admin

String added in the repository
* Generate a DH parameters file:
* Generate a DH parameters file:
06/05/2026
User avatar admin

String added in the repository
``` openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -days 365 -out client.crt ```
``` openssl x509 -req -in client.csr -CA ca.crt -CAkey ca.key -days 365 -out client.crt ```
06/05/2026
User avatar admin

String added in the repository
* Sign the Client CSR using our CA:
* Sign the Client CSR using our CA:
06/05/2026
User avatar admin

String added in the repository
``` openssl req -new -newkey rsa:4096 -keyout client.key -out client.csr -subj "/CN=client.1" ```
``` openssl req -new -newkey rsa:4096 -keyout client.key -out client.csr -subj "/CN=client.1" ```
06/05/2026
User avatar admin

String added in the repository
* Generate a Client CSR:
* Generate a Client CSR:
06/05/2026
User avatar admin

String added in the repository
``` openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -copy_extensions copy -days 365 -out server.crt ```
``` openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -copy_extensions copy -days 365 -out server.crt ```
06/05/2026
User avatar admin

String added in the repository
* Sign the Server CSR using our CA:
* Sign the Server CSR using our CA:
06/05/2026
User avatar admin

String added in the repository
``` openssl req -new -newkey rsa:4096 -keyout server.key -out server.csr -subj "/CN=localhost" -addext "subjectAltName=DNS:localhost,IP:127.0.0.1" ```
``` openssl req -new -newkey rsa:4096 -keyout server.key -out server.csr -subj "/CN=localhost" -addext "subjectAltName=DNS:localhost,IP:127.0.0.1" ```
06/05/2026
User avatar admin

String added in the repository
* Generate a Server CSR:
* Generate a Server CSR:
06/05/2026
User avatar admin

String added in the repository
``` openssl req -new -newkey rsa:4096 -keyout ca.key -x509 -out ca.crt -subj "/CN=localhost" -days 365 ```
``` openssl req -new -newkey rsa:4096 -keyout ca.key -x509 -out ca.crt -subj "/CN=localhost" -days 365 ```
06/05/2026
User avatar admin

String added in the repository
* Generate a CA certificate:
* Generate a CA certificate:
06/05/2026
User avatar admin

String added in the repository
In the following example, we will generate a self-signed CA certificate and use it to issue both server and client certificates.
In the following example, we will generate a self-signed CA certificate and use it to issue both server and client certificates.
06/05/2026

Search