OpenSSL Generating a Private Key
Jump to navigation
Jump to search
Generate the Private Key File
Apache with mod_ssl Enabled
- Generate the private key using openssl.
- To Generate a private key with a pass phrase.
- # openssl genrsa -des3 -out <key_name>_passphrase.key 2048
- Enter a pass phrase for the key.
- Create a copy of the key with no pass phrase.
- # cp <key_name>_passphrase.key <key_name>_nopassphrase.key
- # openssl rsa -in <key_name>_nopassphrase.key -out <key_name>.key
- Verify the checksum of the key, this will be used to verify the CSR and the self signed certificate.
- # openssl rsa -noout -modulus -in <key_name>.key | openssl md5
- To Generate a private key without a pass phrase.
- # openssl genrsa -out <key_name>_passphrase.key 2048
- To Generate a private key with a pass phrase.
- Verify the checksum of the key, this will be used to verify the CSR and the self signed certificate.
- # openssl rsa -noout -modulus -in <key_name>.key | openssl md5
- At this point, create a backup of all of the keys on separate media.
- For use in Apache, use the SSL key with no pass phrase to generate any CSRs.