{"id":1801,"date":"2019-04-20T19:04:18","date_gmt":"2019-04-20T12:04:18","guid":{"rendered":"https:\/\/www.linuxid.net\/post\/?p=1801"},"modified":"2025-04-18T15:22:14","modified_gmt":"2025-04-18T08:22:14","slug":"cara-membuat-sertifikat-ssl-self-signed","status":"publish","type":"post","link":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/","title":{"rendered":"Cara Membuat Sertifikat SSL Self-Signed"},"content":{"rendered":"<p>Artikel ini menjelaskan cara membuat Sertifikat SSL self-signed menggunakan tool openssl.<\/p>\n<h2>Apa itu self-signed SSL certificate?<\/h2>\n<p>Self-signed SSL certificate (Bahasa Indonesia Sertifikat SSL yang ditandatangani sendiri) adalah sertifikat yang hanya ditandatangani oleh orang yang membuatnya, bukan otoritas sertifikat tepercaya. Sertifikat yang ditandatangani sendiri dapat memiliki tingkat enkripsi yang sama dengan sertifikat SSL yang ditandatangani CA.<\/p>\n<p>Sertifikat yang ditandatangani sendiri diakui sebagai sah oleh browser apa pun, namun tidak dapat di verifikasi. Jika Anda menggunakan sertifikat yang ditandatangani sendiri, web browser akan menampilkan peringatan kepada pengunjung bahwa sertifikat situs web tidak dapat diverifikasi.<\/p>\n<p>Sertifikat yang ditandatangani sendiri sebagian besar digunakan untuk tujuan pengujian atau penggunaan internal. Anda tidak boleh menggunakan sertifikat yang ditandatangani sendiri dalam sistem produksi yang sudah siap online ke Internet.<\/p>\n<h2>Prasyarat<\/h2>\n<p>Toolkit openssl diperlukan untuk menghasilkan sertifikat yang ditandatangani sendiri.<\/p>\n<p>Untuk memeriksa apakah paket openssl diinstal pada sistem Linux Anda, buka terminal Anda, ketik <code>openssl version<\/code>, dan tekan <code>Enter<\/code>. Jika paket diinstal, sistem akan mencetak versi OpenSSL, jika tidak, Anda akan melihat sesuatu seperti perintah <code>openssl command not found<\/code>.<\/p>\n<p>Jika paket openssl belum diinstal pada sistem, Anda dapat menginstalnya dengan menjalankan perintah berikut:<\/p>\n<ul>\n<li>Ubuntu dan Debian\n<pre>sudo apt install openssl<\/pre>\n<\/li>\n<li>Centos dan Fedora\n<pre>sudo yum install openssl<\/pre>\n<\/li>\n<\/ul>\n<h2>Membuat Self-Signed SSL Certificate<\/h2>\n<p>Untuk membuat sertifikat SSL yang ditandatangani sendiri, gunakan perintah <code>openssl req<\/code>:<\/p>\n<pre>openssl req -newkey rsa:4096 \\&#13;\n -x509 \\&#13;\n -sha256 \\&#13;\n -days 3650 \\&#13;\n -nodes \\&#13;\n -out example.crt \\&#13;\n -keyout example.key&#13;\n<\/pre>\n<p>Mari uraikan perintah dan pahami apa arti setiap opsi:<\/p>\n<ul>\n<li><code>-newkey rsa:4096<\/code>\u00a0\u2013 Membuat permintaan sertifikat baru dan kunci RSA 4096 bit. Yang standar adalah 2048 bit.<\/li>\n<li><code>-x509<\/code>\u00a0\u2013 Membuat Sertifikat X.509.<\/li>\n<li><code>-sha256<\/code>\u00a0\u2013 Gunakan 265-bit SHA (Secure Hash Algorithm).<\/li>\n<li><code>-days 3650<\/code>\u00a0\u2013 Jumlah hari untuk mensertifikasi sertifikat. 3650 adalah 10 tahun. Anda dapat menggunakan bilangan bulat positif.<\/li>\n<li><code>-nodes<\/code>\u00a0\u2013 Membuat kunci tanpa frasa sandi.<\/li>\n<li><code>-out example.crt<\/code>\u00a0\u2013 Menentukan nama file untuk menulis sertifikat yang baru dibuat. Anda dapat menentukan nama file apa pun.<\/li>\n<li><code>-keyout example.key<\/code>\u00a0\u2013 Menentukan nama file untuk menulis kunci pribadi yang baru dibuat. Anda dapat menentukan nama file apa pun.<\/li>\n<\/ul>\n<p>Untuk informasi lebih lanjut tentang opsi perintah <code>openssl req<\/code> kunjungi halaman dokumentasi <a href=\"https:\/\/www.openssl.org\/docs\/man1.0.2\/man1\/openssl-req.html\" target=\"_blank\" rel=\"noopener\">OpenSSL req<\/a>.<\/p>\n<p>Setelah Anda menekan Enter, perintah akan menghasilkan private key dan menanyakan serangkaian pertanyaan yang akan digunakan untuk menghasilkan sertifikat.<\/p>\n<pre>Generating a RSA private key&#13;\n......................................................................++++&#13;\n........++++&#13;\nwriting new private key to 'example.key'&#13;\n-----&#13;\nYou are about to be asked to enter information that will be incorporated&#13;\ninto your certificate request.&#13;\nWhat you are about to enter is what is called a Distinguished Name or a DN.&#13;\nThere are quite a few fields but you can leave some blank&#13;\nFor some fields there will be a default value,&#13;\nIf you enter '.', the field will be left blank.&#13;\n-----&#13;\n<\/pre>\n<p>Masukkan informasi yang diminta dan tekan Enter.<\/p>\n<pre>Country Name (2 letter code) [AU]:ID&#13;\nState or Province Name (full name) [Some-State]:East Java&#13;\nLocality Name (eg, city) []:Surabaya&#13;\nOrganization Name (eg, company) [Internet Widgits Pty Ltd]:Linuxid&#13;\nOrganizational Unit Name (eg, section) []:Admin&#13;\nCommon Name (e.g. server FQDN or YOUR name) []:linuxid.net&#13;\nEmail Address []:<a href=\"https:\/\/www.linuxid.net\/cdn-cgi\/l\/email-protection\" class=\"__cf_email__\" data-cfemail=\"127a777e7e7d527e7b7c676a7b763c7c7766\">[email\u00a0protected]<\/a>&#13;\n<\/pre>\n<p>Sertifikat dan private key akan dibuat di lokasi yang ditentukan. Gunakan <a href=\"https:\/\/www.linuxid.net\/post\/perintah-ls-di-linux-terminal-dan-contoh-penggunaan\/\">perintah ls<\/a> untuk memverifikasi bahwa file telah dibuat:<\/p>\n<pre>ls<\/pre>\n<pre>example.crt example.key&#13;\n<\/pre>\n<p>Pada poin ini, Anda telah menghasilkan sertifikat SSL baru.<\/p>\n<h2>Membuat Sertifikat SSL yang Ditandatangani Sendiri tanpa Prompt<\/h2>\n<p>Jika Anda ingin membuat sertifikat SSL yang ditandatangani sendiri tanpa diminta pertanyaan, gunakan opsi <code>-subj<\/code> dan tentukan semua informasi subjek:<\/p>\n<pre>openssl req -newkey rsa:4096 \\&#13;\n -x509 \\&#13;\n -sha256 \\&#13;\n -days 3650 \\&#13;\n -nodes \\&#13;\n -out example.crt \\&#13;\n -keyout example.key \\&#13;\n -subj \"\/C=ID\/ST=Ljubljana\/L=Ljubljana\/O=Security\/OU=IT Department\/CN=www.example.com\"&#13;\n<\/pre>\n<pre>Generating a RSA private key&#13;\n......................................................................++++&#13;\n........++++&#13;\nwriting new private key to 'example.key'&#13;\n-----<\/pre>\n<p>Bidang, yang ditentukan dalam -subj baris tercantum di bawah ini:<\/p>\n<ul>\n<li>C= \u2013 Nama negara. Singkatan ISO dua huruf.<\/li>\n<li>ST= \u2013 Nama Provinsi.<\/li>\n<li>L= \u2013 Nama kota tempat Anda berada.<\/li>\n<li>O= \u2013 Nama lengkap organisasi Anda.<\/li>\n<li>OU= \u2013 Unit Organisasi.<\/li>\n<li>CN= \u2013 Nama domain yang sepenuhnya memenuhi syarat.<\/li>\n<\/ul>\n<h2>Kesimpulan<\/h2>\n<p>Dalam panduan ini, kami telah menunjukkan kepada Anda cara membuat sertifikat SSL yang ditandatangani sendiri menggunakan alat openssl. Sekarang setelah memiliki sertifikat, Anda dapat mengonfigurasi aplikasi untuk menggunakannya.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Artikel ini menjelaskan cara membuat Sertifikat SSL self-signed menggunakan tool openssl. Apa itu self-signed SSL&hellip;<\/p>\n","protected":false},"author":2,"featured_media":1802,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[107],"tags":[262,23,187],"class_list":["post-1801","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-other","tag-enkripsi","tag-security","tag-ssl"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.7 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cara Membuat Sertifikat SSL Self-Signed - Linuxid<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/\" \/>\n<meta property=\"og:locale\" content=\"id_ID\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cara Membuat Sertifikat SSL Self-Signed - Linuxid\" \/>\n<meta property=\"og:description\" content=\"Artikel ini menjelaskan cara membuat Sertifikat SSL self-signed menggunakan tool openssl. Apa itu self-signed SSL&hellip;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/\" \/>\n<meta property=\"og:site_name\" content=\"Linuxid\" \/>\n<meta property=\"article:published_time\" content=\"2019-04-20T12:04:18+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-04-18T08:22:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.linuxid.net\/post\/wp-content\/uploads\/2025\/03\/Cara-Membuat-Sertifikat-SSL-Self-Signed.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"921\" \/>\n\t<meta property=\"og:image:height\" content=\"430\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"xsand\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Ditulis oleh\" \/>\n\t<meta name=\"twitter:data1\" content=\"xsand\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimasi waktu membaca\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 menit\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/\",\"url\":\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/\",\"name\":\"Cara Membuat Sertifikat SSL Self-Signed - Linuxid\",\"isPartOf\":{\"@id\":\"https:\/\/linuxid.net\/post\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.linuxid.net\/post\/wp-content\/uploads\/2025\/03\/Cara-Membuat-Sertifikat-SSL-Self-Signed.jpg\",\"datePublished\":\"2019-04-20T12:04:18+00:00\",\"dateModified\":\"2025-04-18T08:22:14+00:00\",\"author\":{\"@id\":\"https:\/\/linuxid.net\/post\/#\/schema\/person\/e6642d26041eab9fef2677e204e89d79\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#breadcrumb\"},\"inLanguage\":\"id\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#primaryimage\",\"url\":\"https:\/\/www.linuxid.net\/post\/wp-content\/uploads\/2025\/03\/Cara-Membuat-Sertifikat-SSL-Self-Signed.jpg\",\"contentUrl\":\"https:\/\/www.linuxid.net\/post\/wp-content\/uploads\/2025\/03\/Cara-Membuat-Sertifikat-SSL-Self-Signed.jpg\",\"width\":921,\"height\":430},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Beranda\",\"item\":\"https:\/\/linuxid.net\/post\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Cara Membuat Sertifikat SSL Self-Signed\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/linuxid.net\/post\/#website\",\"url\":\"https:\/\/linuxid.net\/post\/\",\"name\":\"Linuxid\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/linuxid.net\/post\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"id\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/linuxid.net\/post\/#\/schema\/person\/e6642d26041eab9fef2677e204e89d79\",\"name\":\"xsand\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"id\",\"@id\":\"https:\/\/linuxid.net\/post\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cc8513768e15fa0758099a0ba5b898f3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cc8513768e15fa0758099a0ba5b898f3?s=96&d=mm&r=g\",\"caption\":\"xsand\"},\"url\":\"https:\/\/www.linuxid.net\/post\/author\/xsand\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cara Membuat Sertifikat SSL Self-Signed - Linuxid","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/","og_locale":"id_ID","og_type":"article","og_title":"Cara Membuat Sertifikat SSL Self-Signed - Linuxid","og_description":"Artikel ini menjelaskan cara membuat Sertifikat SSL self-signed menggunakan tool openssl. Apa itu self-signed SSL&hellip;","og_url":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/","og_site_name":"Linuxid","article_published_time":"2019-04-20T12:04:18+00:00","article_modified_time":"2025-04-18T08:22:14+00:00","og_image":[{"width":921,"height":430,"url":"https:\/\/www.linuxid.net\/post\/wp-content\/uploads\/2025\/03\/Cara-Membuat-Sertifikat-SSL-Self-Signed.jpg","type":"image\/jpeg"}],"author":"xsand","twitter_card":"summary_large_image","twitter_misc":{"Ditulis oleh":"xsand","Estimasi waktu membaca":"3 menit"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/","url":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/","name":"Cara Membuat Sertifikat SSL Self-Signed - Linuxid","isPartOf":{"@id":"https:\/\/linuxid.net\/post\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#primaryimage"},"image":{"@id":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#primaryimage"},"thumbnailUrl":"https:\/\/www.linuxid.net\/post\/wp-content\/uploads\/2025\/03\/Cara-Membuat-Sertifikat-SSL-Self-Signed.jpg","datePublished":"2019-04-20T12:04:18+00:00","dateModified":"2025-04-18T08:22:14+00:00","author":{"@id":"https:\/\/linuxid.net\/post\/#\/schema\/person\/e6642d26041eab9fef2677e204e89d79"},"breadcrumb":{"@id":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#breadcrumb"},"inLanguage":"id","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/"]}]},{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#primaryimage","url":"https:\/\/www.linuxid.net\/post\/wp-content\/uploads\/2025\/03\/Cara-Membuat-Sertifikat-SSL-Self-Signed.jpg","contentUrl":"https:\/\/www.linuxid.net\/post\/wp-content\/uploads\/2025\/03\/Cara-Membuat-Sertifikat-SSL-Self-Signed.jpg","width":921,"height":430},{"@type":"BreadcrumbList","@id":"https:\/\/www.linuxid.net\/post\/cara-membuat-sertifikat-ssl-self-signed\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Beranda","item":"https:\/\/linuxid.net\/post\/"},{"@type":"ListItem","position":2,"name":"Cara Membuat Sertifikat SSL Self-Signed"}]},{"@type":"WebSite","@id":"https:\/\/linuxid.net\/post\/#website","url":"https:\/\/linuxid.net\/post\/","name":"Linuxid","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/linuxid.net\/post\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"id"},{"@type":"Person","@id":"https:\/\/linuxid.net\/post\/#\/schema\/person\/e6642d26041eab9fef2677e204e89d79","name":"xsand","image":{"@type":"ImageObject","inLanguage":"id","@id":"https:\/\/linuxid.net\/post\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cc8513768e15fa0758099a0ba5b898f3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc8513768e15fa0758099a0ba5b898f3?s=96&d=mm&r=g","caption":"xsand"},"url":"https:\/\/www.linuxid.net\/post\/author\/xsand\/"}]}},"_links":{"self":[{"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/posts\/1801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/comments?post=1801"}],"version-history":[{"count":1,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/posts\/1801\/revisions"}],"predecessor-version":[{"id":2992,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/posts\/1801\/revisions\/2992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/media\/1802"}],"wp:attachment":[{"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/media?parent=1801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/categories?post=1801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.linuxid.net\/post\/wp-json\/wp\/v2\/tags?post=1801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}