Setting up a self-signed SSL certificate

This HowTo describes the steps to import a self-signed SSL (Secure Sockets Layer) certificate.

A self-signed SSL certificate is an identity certificate that is signed by the same entity whose identity it certificates. Such a certificate is used only for development purposes. For production purposes, we recommend generating a valid SSL certificate signed by an official certification center like letsEncrypt.

There is a self-signed SSL certificate shipped with Spryker in Docker. It is located in docker/deployment/default/spryker_ca.crt. To access your instance via a secure connection, add the certificate to trusted authorities in the host system.

Depending on the operating system, follow the instructions:

• Setting up a self-signed SSL certificate on Windows
• Setting up a self-signed SSL certificate on Linux
  • Setting up a self-signed SSL certificate in Google Chrome on Linux
  • Setting up a self-signed SSL certificate in Firefox on Linux
• Setting up a self-signed SSL certificate on MacOS

Setting up a self-signed SSL certificate on Windows

To add spryker_ca.crt to trusted authorities in Windows:

1. To open the Run window, press Win+R.
2. In the Open field, enter mmc and press Enter.
3. Click Yes to confirm the action.
4. From the File menu, select Add/Remove Snap-in….

5. In the Available snap-ins list, select Certificates.

6. Select Add >.

7. Click Certificates (local computer) > Trusted Root Authorities.

8. Right-click the Certificates folder and select All Tasks > Import.

9. Select the spryker_ca.crt file and click OK.

Setting up a self-signed SSL certificate on Linux

On Linux, you can add the certificate to trusted authorities only in a browser. Below, you can find instructions for importing the certificate in Google Chrome and Firefox.

Setting up a self-signed SSL certificate in Google Chrome on Linux

To add spryker_ca.crt to trusted authorities in Google Chrome on Linux:

1. Click More.
2. Select Settings.
3. On the Settings page, go to Advanced > Manage certificates.
4. Go to the Authorities tab.
5. Select Import.
6. Select spryker_ca.crt and click Open.
7. Select Trust this certificate for identifying websites.
8. Click OK to save the changes.
9. Restart the browser.

Setting up a self-signed SSL certificate in Firefox on Linux

To add spryker_ca.crt to trusted authorities in Firefox on Linux:

1. Click Open menu .
2. Select Options.
3. On the Options page, select Privacy & Security.
4. Scroll down to the Certificates section.
5. Click View Certificates.
6. In the Authorities tab, click Import.
7. Select spryker_ca.crt.
8. Select Trust this CA to identify websites.
9. Click OK to save the changes.

Setting up a self-signed SSL certificate on MacOS

To add spryker_ca.crt to trusted authorities in MacOS:

1. Open Keychain Access.

2. Select File > Import Items.

3. Select spryker_ca.crt and click Open.

4. Go to the Certificates category.

5. Right-click the Spryker certificate and select Get Info.

6. Open the Trust drop-down menu.

7. In the When using this certificate drop-down menu, select Always Trust.