Difference between revisions of "Generate a certificate request for a commercial Certificate Authority"
From Organic Design wiki
m |
(Change source-code blocks to standard format) |
||
(4 intermediate revisions by 2 users not shown) | |||
Line 1: | Line 1: | ||
− | [[Category:Sysop procedures]][[Category: | + | [[Category:Sysop procedures]][[Category:SSL]] |
Generate a key for the certificate request. | Generate a key for the certificate request. | ||
− | + | <source> | |
+ | openssl genrsa -out www.foo.com.key 2048 | ||
+ | </source> | ||
+ | |||
+ | |||
The next line will prompt for certificate details. The common name (CN) ''must'' be the same as the domain name of the web site. | The next line will prompt for certificate details. The common name (CN) ''must'' be the same as the domain name of the web site. | ||
− | + | <source> | |
+ | openssl req -new -nodes -key www.foo.com.key -out www.foo.com.csr | ||
+ | </source> | ||
+ | |||
+ | |||
The resulting file will look something like: | The resulting file will look something like: | ||
− | < | + | <source> |
-----BEGIN CERTIFICATE REQUEST----- | -----BEGIN CERTIFICATE REQUEST----- | ||
MIICwzCCAasCAQAwfjELMAkGA1UEBhMCVVMxFDASBgNVBAgTC0Nvbm5lY3RpY3V0 | MIICwzCCAasCAQAwfjELMAkGA1UEBhMCVVMxFDASBgNVBAgTC0Nvbm5lY3RpY3V0 | ||
Line 12: | Line 20: | ||
... | ... | ||
-----END CERTIFICATE REQUEST----- | -----END CERTIFICATE REQUEST----- | ||
− | </ | + | </source> |
+ | |||
+ | ==Storage of certificate-related files== | ||
+ | These are all stored on organicdesign.co.nz under ''/root/ssl''. |
Latest revision as of 18:11, 22 May 2015
Generate a key for the certificate request.
openssl genrsa -out www.foo.com.key 2048
The next line will prompt for certificate details. The common name (CN) must be the same as the domain name of the web site.
openssl req -new -nodes -key www.foo.com.key -out www.foo.com.csr
The resulting file will look something like:
-----BEGIN CERTIFICATE REQUEST-----
MIICwzCCAasCAQAwfjELMAkGA1UEBhMCVVMxFDASBgNVBAgTC0Nvbm5lY3RpY3V0
....
...
...
-----END CERTIFICATE REQUEST-----
These are all stored on organicdesign.co.nz under /root/ssl.