Difference between revisions of "Generate a certificate request for a commercial Certificate Authority"
From Organic Design wiki
(not cat installation or procedures) |
(Change source-code blocks to standard format) |
||
(3 intermediate revisions by one other user not shown) | |||
Line 1: | Line 1: | ||
+ | [[Category:Sysop procedures]][[Category:SSL]] | ||
Generate a key for the certificate request. | Generate a key for the certificate request. | ||
− | + | <source> | |
openssl genrsa -out www.foo.com.key 2048 | openssl genrsa -out www.foo.com.key 2048 | ||
− | </ | + | </source> |
The next line will prompt for certificate details. The common name (CN) ''must'' be the same as the domain name of the web site. | The next line will prompt for certificate details. The common name (CN) ''must'' be the same as the domain name of the web site. | ||
− | + | <source> | |
openssl req -new -nodes -key www.foo.com.key -out www.foo.com.csr | openssl req -new -nodes -key www.foo.com.key -out www.foo.com.csr | ||
− | </ | + | </source> |
The resulting file will look something like: | The resulting file will look something like: | ||
− | + | <source> | |
-----BEGIN CERTIFICATE REQUEST----- | -----BEGIN CERTIFICATE REQUEST----- | ||
MIICwzCCAasCAQAwfjELMAkGA1UEBhMCVVMxFDASBgNVBAgTC0Nvbm5lY3RpY3V0 | MIICwzCCAasCAQAwfjELMAkGA1UEBhMCVVMxFDASBgNVBAgTC0Nvbm5lY3RpY3V0 | ||
Line 19: | Line 20: | ||
... | ... | ||
-----END CERTIFICATE REQUEST----- | -----END CERTIFICATE REQUEST----- | ||
− | </ | + | </source> |
+ | |||
+ | ==Storage of certificate-related files== | ||
+ | These are all stored on organicdesign.co.nz under ''/root/ssl''. |
Latest revision as of 18:11, 22 May 2015
Generate a key for the certificate request.
openssl genrsa -out www.foo.com.key 2048
The next line will prompt for certificate details. The common name (CN) must be the same as the domain name of the web site.
openssl req -new -nodes -key www.foo.com.key -out www.foo.com.csr
The resulting file will look something like:
-----BEGIN CERTIFICATE REQUEST-----
MIICwzCCAasCAQAwfjELMAkGA1UEBhMCVVMxFDASBgNVBAgTC0Nvbm5lY3RpY3V0
....
...
...
-----END CERTIFICATE REQUEST-----
These are all stored on organicdesign.co.nz under /root/ssl.