Self-signed certificates can be made with no costs, and without public CA involvement. There are multiple free tools available for creating such certificates. The following examples will show how to use OpenSSL on linux machine, and RouterOS CLI to generate and sign your own certificates.
RouterOS example:
First we need to make our own CA who will sign the cerificates
|
1 2 3 |
/certificate add name=ca-template common-name=myCa key-usage=key-cert-sign,crl-sign sign ca-template name=myCa |
Now create a certificate for Hotspot
|
1 2 3 |
/certificate add name=Hotspot-template common-name=Hotspot sign Hotspot-template ca=myCa name=Hotspot |
Make server certificate trusted
|
1 |
set [find name=Hotspot] trusted=yes |
