Generate a CSR on Linux with OpenSSL

If you are on a Linux server chances are you are running OpenSSL. When generating a CSR you need to understand that mydomain.com is different from www.mydomain.com.
To generate a CSR follow the steps below.

Steps

1. Login to your server From the console or SSH terminal.
2. Type "openssl genrsa -out .key 2048 to generate a private key.

Do not include the "< >"
For example you could type:

# openssl genrsa -out mydomain.com.key 2048

You need to protect your private key. You should also make a backup of it and store it offsite.
If you are going to store on the server make sure you set the correct permissions on your private key file.

3. Type "openssl req -new -key mydomain.com.key -out mydomain.com.csr" to generate your CSR.

You will then be prompted for your organizational information. There may be default information set, please reveiw.

- Two Letter Country Code
- State or Province Name (full name)
- Locality Name (eg, city)
- Organization Name (eg, company)
- Organizational Unit Name (eg, section)
- Common Name (eg, your name or your server's hostname
- Email Address

You will be asked for a challenge password. Just hit enter.
You will be asked for an optional company name. Just hit enter.

4. Type "cat <name of your CSR file>" to copy the contents of the file and paste for SSL Certificate Configuration.

Alternatively, you can copy the files or email them to yourself.

5. Done.

Tudásbázis

Kategóriák

Kategóriák

Kapcsolódó cikkek

Címkefelhő

Támogatás

Tudásbázis

Kategóriák

Kategóriák