Generate a CSR on Linux with OpenSSL

If you are on a Linux server chances are you are running OpenSSL. When generating a CSR you need to understand that mydomain.com is different from www.mydomain.com.
To generate a CSR follow the steps below.

Steps

1. Login to your server From the console or SSH terminal.
2. Type "openssl genrsa -out .key 2048 to generate a private key.

Do not include the "< >"
For example you could type:

# openssl genrsa -out mydomain.com.key 2048

You need to protect your private key. You should also make a backup of it and store it offsite.
If you are going to store on the server make sure you set the correct permissions on your private key file.

3. Type "openssl req -new -key mydomain.com.key -out mydomain.com.csr" to generate your CSR.

You will then be prompted for your organizational information. There may be default information set, please reveiw.

- Two Letter Country Code
- State or Province Name (full name)
- Locality Name (eg, city)
- Organization Name (eg, company)
- Organizational Unit Name (eg, section)
- Common Name (eg, your name or your server's hostname
- Email Address

You will be asked for a challenge password. Just hit enter.
You will be asked for an optional company name. Just hit enter.

4. Type "cat <name of your CSR file>" to copy the contents of the file and paste for SSL Certificate Configuration.

Alternatively, you can copy the files or email them to yourself.

5. Done.




  • 70 Users Found This Useful
Was this answer helpful?

Related Articles

Generating a CSR on Plesk 9

If you are looking to secure your web site you need to install a SSL Cert. Follow the steps below...

Add a SSL Certificate on Plesk 9

You have  your SSL Cert to Plesk 9.Steps for copying the text Login to the Plesk Control...

SSL Certificate Ordering Process with OCOSA

If you are here, then you are wondering how this process will work. OCOSA sells the same brands...

Generate Self-signed Certificate with PEM output on Linux

Using OpenSSL:You should keep the key at 2048 bits.1. openssl genrsa -out server-key.pem 2048Next...

Install SSL on Lighttpd

Lighttpd is a bit different from apache (httpd) server.You can install one of the other articles...