@@ -149,3 +149,17 @@ Urbit network.
149149
150150When this happens, back up any files you'd like to save, shut down your
151151Urbit and recreate it (as if you were starting for the first time).
152+
153+## Creating SSL certificates
154+
155+It is possible to create SSL certificates so that you serve files through your ship's webserver using https.
156+To do that you, would need a machine that has OpenSSL installed.
157+In order to create a new private key and a self-signed certificate for your localhost, valid for a year, you can issue the following commands:
158+
159+```
160+$ openssl req -x509 -sha256 -newkey rsa:4096 -keyout private.pem -out certificate.pem -subj '/CN=localhost' -days 365
161+$ mkdir -p your-urbit/.urb/tls
162+$ mv private.pem certificate.pem your-urbit/.urb/tls
163+```
164+These certificates would have to be manually trusted by your browser, and it's advisable that they are used only for your localhost.
165+For public-facing webservers, it would be better to create certificates for your fully qualified domain name using a trusted certificate authority like Let's Encrypt.