Self-signed SSL cert

S3Drive supports self-signed certificate in a PEM format. Certificate must be imported into S3Drive app.

Adding certificate on the OS level might work on some desktop platforms (e.g. Ubuntu - /usr/share/ca-certificates), but in general it is required to import it to S3Drive.

In-app settings¶

Self-signed SSL cert certificate settings

Example way of generating an SSL certificate¶

openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -subj "/C=US/ST=Oklahoma/L=Stillwater/O=My Company/OU=Engineering/CN=your.domain.com" -keyout rootCA.key -out rootCA.crt
openssl genrsa -out "your.domain.com.key" 2048
openssl req -new -key your.domain.com.key -out your.domain.com.csr -config openssl.cnf
openssl x509 -req -days 365 -in your.domain.com.csr -CA rootCA.crt -CAkey rootCA.key -CAcreateserial -extensions v3_req -extfile openssl.cnf -out your.domain.com.crt

openssl.cnf¶

[req]
default_bits = 2048
encrypt_key  = no # Change to encrypt the private key using des3 or similar
default_md   = sha256
prompt       = no
utf8         = yes

# Specify the DN here so we aren't prompted (along with prompt = no above).

distinguished_name = req_distinguished_name

# Extensions for SAN IP and SAN DNS

req_extensions = v3_req

# Be sure to update the subject to match your organization.

[req_distinguished_name]
C  = US
ST = Oklahoma
L  = Stillwater
O  = My Company
OU = Engineering
CN = your.domain.com

# Allow client and server auth. You may want to only allow server auth.
# Link to SAN names.

[v3_req]
basicConstraints     = CA:TRUE
subjectKeyIdentifier = hash
keyUsage             = digitalSignature, keyEncipherment
extendedKeyUsage     = clientAuth, serverAuth
subjectAltName       = @alt_names

# Alternative names are specified as IP.# and DNS.# for IP addresses and
# DNS accordingly.

[alt_names]
DNS.1 = your.domain.com

Example certificate¶

your.domain.com.crt