@@ -149,3 +149,17 @@ Urbit network.
150When this happens, back up any files you'd like to save, shut down your
150When this happens, back up any files you'd like to save, shut down your
151Urbit and recreate it (as if you were starting for the first time).
151Urbit and recreate it (as if you were starting for the first time).
153+## Creating SSL certificates
155+It is possible to create SSL certificates so that you serve files through your ship's webserver using https.
156+To do that you, would need a machine that has OpenSSL installed.
157+In order to create a new private key and a self-signed certificate for your localhost, valid for a year, you can issue the following commands:
160+$ openssl req -x509 -sha256 -newkey rsa:4096 -keyout private.pem -out certificate.pem -subj '/CN=localhost' -days 365
161+$ mkdir -p your-urbit/.urb/tls
162+$ mv private.pem certificate.pem your-urbit/.urb/tls
164+These certificates would have to be manually trusted by your browser, and it's advisable that they are used only for your localhost.
165+For public-facing webservers, it would be better to create certificates for your fully qualified domain name using a trusted certificate authority like Let's Encrypt.