Generate a CSR on Linux Server

This article will discuss how to create a CSR (Certificate Signing Request) for an SSL in Linux. This is necessary if you are submitting a request for an SSL with another provider.

SSH into the Linux server. If you are unsure of how to SSH, please see how to SSH on Windows | Mac .
At the command prompt, type the following and hit Return. Change the bit length (2048) to the appropriate bit length for the SSL issuer. Typically 2048 is sufficient.

openssl req -nodes -newkey rsa:2048 -keyout domain.key -out domain.csr

Fill out the requested information below. For the State, use the full name not an abbreviation. The Organization Name should be a publicly verifiable name (such as is listed on bank statements, bills, taxes, etc). The common name is the domain for which the SSL is being issued. For example, if you're ordering an SSL for domain.com, then the name would be domain.com. If you're ordering an SSL for www.domain.com, then the name would be www.domain.com.

You may chose to leave the email address and challenge password blank by simply hitting return when prompted.

Generating a 2048 bit RSA private key
...........+++
.............................+++
writing new private key to 'domain.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]:US
State or Province Name (full name) [Berkshire]:Newark
Locality Name (eg, city) [Newbury]:Delaware
Organization Name (eg, company) [My Company Ltd]:My Company Name
Organizational Unit Name (eg, section) []:Security
Common Name (eg, your name or your server's hostname) []:www.domain.com
Email Address []:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Once the form is filled out, two files will be created in the directory in which the command was run. The file domain.csr has the CSR for the SSL which will need to provide to the SSL issuer. It will look similar to the following:

The file domain.key has the key for the SSL which will you will need once the SSL is issued. The certificate, once issued, must match the key in order for the SSL to be installed. It will look similar to the following:

Preguntes Freqüents - FAQ

Categories

Categories

Articles Relacionats

Núvol d'etiquetes

suport

Preguntes Freqüents - FAQ

Categories

Categories