OpenSSL Generating a Certificate Signing Request

From UNIX Systems Administration
Revision as of 17:09, 21 February 2013 by Michael Kohler (talk | contribs) (Michael Kohler moved page Generating a SSL Certificate Signing Request to OpenSSL Generating a Certificate Signing Request without leaving a redirect)
Jump to navigation Jump to search

Generate the Certificate Signing Request (CSR)

Apache with mod_ssl Enabled

  1. If required follow the Generating a Private SSL Key procedure.
  2. For Apache purposes, use the key with no pass phrase to generate the CSR file.
  3. Generate the CSR from the private key using openssl.
    1. # openssl req -new -key <key_name>.key -out <csr_name>.csr
  4. Enter the information as required by the prompts.
  5. Verify the checksum of the key, this will be used to verify the CSR and the self signed certificate.
    1. # openssl req -noout -modulus -in <csr_name>.csr | openssl md5

Further Reading

  1. How to Generate SSL key, CSR, and Self Signed Certificate for Apache