OpenSSL Generating a Certificate Signing Request - Revision history

Michael Kohler: /* Generate the Certificate Signing Request (CSR) */

2020-11-15T04:08:54Z

Generate the Certificate Signing Request (CSR)

← Older revision		Revision as of 04:08, 15 November 2020
Line 44:		Line 44:
	# Verify the checksum of the key matches the checksum CSR.		# Verify the checksum of the key matches the checksum CSR.
	#: <tt>'''# openssl req -noout -modulus -in <csr_name>.csr \| openssl md5'''</tt>		#: <tt>'''# openssl req -noout -modulus -in <csr_name>.csr \| openssl md5'''</tt>
			# Review the contents of the certificate singing request (CSR).
			#: <tt>'''openssl req -noout -text -in <csr_name>.csr'''</tt>

	== Further Reading ==		== Further Reading ==

Michael Kohler: /* Generate the Certificate Signing Request (CSR) */

2020-11-15T04:06:52Z

Generate the Certificate Signing Request (CSR)

← Older revision		Revision as of 04:06, 15 November 2020
Line 40:		Line 40:
	EOL		EOL
	# Generate the CSR from the private key using openssl.		# Generate the CSR from the private key using openssl.
	#: <tt>'''# openssl req -new -~~key~~ <~~key_name~~>.~~key~~ -out <csr_name>.csr'''</tt>		#: <tt>'''# openssl req -new -config <config_file>.cnf -out <csr_name>.csr'''</tt>
	# Enter the information as required by the prompts.		# Enter the information as required by the prompts.
	# Verify the checksum of the key matches the checksum CSR.		# Verify the checksum of the key matches the checksum CSR.

Michael Kohler: /* Apache with mod_ssl Enabled (With subjectAltName) */

2020-11-15T04:04:02Z

Apache with mod_ssl Enabled (With subjectAltName)

← Older revision		Revision as of 04:04, 15 November 2020
Line 18:		Line 18:
	distinguished_name = req_distinguished_name		distinguished_name = req_distinguished_name
	req_extensions = req_ext		req_extensions = req_ext

	[ req_distinguished_name ]		[ req_distinguished_name ]
	countryName = Country Name (2 letter code)		countryName = Country Name (2 letter code)
Line 30:		Line 30:
	commonName = Common Name (e.g. server FQDN or YOUR name)		commonName = Common Name (e.g. server FQDN or YOUR name)
	commonName_max = 64		commonName_max = 64

	[ req_ext ]		[ req_ext ]
	subjectAltName = @alt_names		subjectAltName = @alt_names

	[alt_names]		[alt_names]
	DNS.1 = <domain>.com		DNS.1 = <domain>.com

Michael Kohler: /* Apache with mod_ssl Enabled (With subjectAltName) */

2020-11-15T04:03:39Z

Apache with mod_ssl Enabled (With subjectAltName)

← Older revision		Revision as of 04:03, 15 November 2020
Line 13:		Line 13:
	# Create a config file to be configured with the multiple subdomains.		# Create a config file to be configured with the multiple subdomains.
	#: <tt>'''# cat << EOL >> <config_file>.cnf'''</tt>		#: <tt>'''# cat << EOL >> <config_file>.cnf'''</tt>
	~~#:<tt>'''~~[ req ]~~'''</tt>~~		[ req ]
	~~#:<tt>'''~~default_bits = 2048~~'''</tt>~~		default_bits = 2048
	~~#:<tt>'''~~default_keyfile = <private_key>.key~~'''</tt>~~		default_keyfile = <private_key>.key
	~~#:<tt>'''~~distinguished_name = req_distinguished_name~~'''</tt>~~		distinguished_name = req_distinguished_name
	~~#:<tt>'''~~req_extensions = req_ext~~'''</tt>~~		req_extensions = req_ext
	#:
	~~#:<tt>'''~~[ req_distinguished_name ]~~'''</tt>~~		[ req_distinguished_name ]
	~~#:<tt>'''~~countryName = Country Name (2 letter code)~~'''</tt>~~		countryName = Country Name (2 letter code)
	~~#:<tt>'''~~countryName_default = US~~'''</tt>~~		countryName_default = US
	~~#:<tt>'''~~stateOrProvinceName = State or Province Name (full name)~~'''</tt>~~		stateOrProvinceName = State or Province Name (full name)
	~~#:<tt>'''~~stateOrProvinceName_default = New York~~'''</tt>~~		stateOrProvinceName_default = New York
	~~#:<tt>'''~~localityName = Locality Name (eg, city)~~'''</tt>~~		localityName = Locality Name (eg, city)
	~~#:<tt>'''~~localityName_default = New York~~'''</tt>~~		localityName_default = New York
	~~#:<tt>'''~~organizationName = Organization Name (eg, company)~~'''</tt>~~		organizationName = Organization Name (eg, company)
	~~#:<tt>'''~~organizationName_default = Example~~'''</tt>~~		organizationName_default = Example
	~~#:<tt>'''~~commonName = Common Name (e.g. server FQDN or YOUR name)~~'''</tt>~~		commonName = Common Name (e.g. server FQDN or YOUR name)
	~~#:<tt>'''~~commonName_max = 64~~'''</tt>~~		commonName_max = 64
	#:
	~~#:<tt>'''~~[ req_ext ]~~'''</tt>~~		[ req_ext ]
	~~#:<tt>'''~~subjectAltName = @alt_names~~'''</tt>~~		subjectAltName = @alt_names
	#:
	~~#:<tt>'''~~[alt_names]~~'''</tt>~~		[alt_names]
	~~#:<tt>'''~~DNS.1 = <domain>.com~~'''</tt>~~		DNS.1 = <domain>.com
	~~#:<tt>'''~~DNS.2 = www.<domain>.com~~'''</tt>~~		DNS.2 = www.<domain>.com
	~~#:<tt>'''~~DNS.3 = *.<domain>.com~~'''</tt>~~		DNS.3 = *.<domain>.com
	~~#:<tt>'''~~EOL~~'''</tt>~~		EOL
	# Generate the CSR from the private key using openssl.		# Generate the CSR from the private key using openssl.
	#: <tt>'''# openssl req -new -key <key_name>.key -out <csr_name>.csr'''</tt>		#: <tt>'''# openssl req -new -key <key_name>.key -out <csr_name>.csr'''</tt>

Michael Kohler: /* Apache with mod_ssl Enabled (With subjectAltName) */

2020-11-15T04:02:02Z

Apache with mod_ssl Enabled (With subjectAltName)

← Older revision		Revision as of 04:02, 15 November 2020
Line 14:		Line 14:
	#: <tt>'''# cat << EOL >> <config_file>.cnf'''</tt>		#: <tt>'''# cat << EOL >> <config_file>.cnf'''</tt>
	#:<tt>'''[ req ]'''</tt>		#:<tt>'''[ req ]'''</tt>
	#:<tt>'''default_bits = 2048'''</tt>		#:<tt>'''default_bits = 2048'''</tt>
	#:<tt>'''default_keyfile = <private_key>.key'''</tt>		#:<tt>'''default_keyfile = <private_key>.key'''</tt>
	#:<tt>'''distinguished_name = req_distinguished_name'''</tt>		#:<tt>'''distinguished_name = req_distinguished_name'''</tt>
	#:<tt>'''req_extensions = req_ext'''</tt>		#:<tt>'''req_extensions = req_ext'''</tt>
	#:		#:
	#:<tt>'''[ req_distinguished_name ]'''</tt>		#:<tt>'''[ req_distinguished_name ]'''</tt>

Michael Kohler: /* Apache with mod_ssl Enabled (With subjectAltName) */

2020-11-15T03:56:21Z

Apache with mod_ssl Enabled (With subjectAltName)

← Older revision		Revision as of 03:56, 15 November 2020
Line 15:		Line 15:
	#:<tt>'''[ req ]'''</tt>		#:<tt>'''[ req ]'''</tt>
	#:<tt>'''default_bits = 2048'''</tt>		#:<tt>'''default_bits = 2048'''</tt>
	#:<tt>'''default_keyfile = ~~san~~.key ~~#name of the keyfile~~'''</tt>		#:<tt>'''default_keyfile = <private_key>.key'''</tt>
	#:<tt>'''distinguished_name = req_distinguished_name'''</tt>		#:<tt>'''distinguished_name = req_distinguished_name'''</tt>
	#:<tt>'''req_extensions = req_ext'''</tt>		#:<tt>'''req_extensions = req_ext'''</tt>
Line 21:		Line 21:
	#:<tt>'''[ req_distinguished_name ]'''</tt>		#:<tt>'''[ req_distinguished_name ]'''</tt>
	#:<tt>'''countryName = Country Name (2 letter code)'''</tt>		#:<tt>'''countryName = Country Name (2 letter code)'''</tt>
	#:<tt>'''countryName_default = GB'''</tt>		#:<tt>'''countryName_default = US'''</tt>
	#:<tt>'''stateOrProvinceName = State or Province Name (full name)'''</tt>		#:<tt>'''stateOrProvinceName = State or Province Name (full name)'''</tt>
	#:<tt>'''stateOrProvinceName_default = ~~West Midlands~~'''</tt>		#:<tt>'''stateOrProvinceName_default = New York'''</tt>
	#:<tt>'''localityName = Locality Name (eg, city)'''</tt>		#:<tt>'''localityName = Locality Name (eg, city)'''</tt>
	#:<tt>'''localityName_default = ~~Birmingham~~'''</tt>		#:<tt>'''localityName_default = New York'''</tt>
	#:<tt>'''organizationName = Organization Name (eg, company)'''</tt>		#:<tt>'''organizationName = Organization Name (eg, company)'''</tt>
	#:<tt>'''organizationName_default = Example'''</tt>		#:<tt>'''organizationName_default = Example'''</tt>
Line 33:		Line 33:
	#:<tt>'''[ req_ext ]'''</tt>		#:<tt>'''[ req_ext ]'''</tt>
	#:<tt>'''subjectAltName = @alt_names'''</tt>		#:<tt>'''subjectAltName = @alt_names'''</tt>
	#:~~<tt>''''''</tt>~~		#:
	#:<tt>'''[alt_names]'''</tt>		#:<tt>'''[alt_names]'''</tt>
	#:<tt>'''DNS.1 = ~~www.example~~.com'''</tt>		#:<tt>'''DNS.1 = <domain>.com'''</tt>
	#:<tt>'''DNS.2 = www.~~example~~.~~net~~'''</tt>		#:<tt>'''DNS.2 = www.<domain>.com'''</tt>
	#:<tt>'''DNS.3 = ~~www~~.~~example~~.~~org~~'''</tt>		#:<tt>'''DNS.3 = *.<domain>.com'''</tt>
	#:<tt>'''EOL'''</tt>		#:<tt>'''EOL'''</tt>
	# Generate the CSR from the private key using openssl.		# Generate the CSR from the private key using openssl.

Michael Kohler: /* Apache with mod_ssl Enabled (With subjectAltName) */

2020-11-15T03:53:48Z

Apache with mod_ssl Enabled (With subjectAltName)

← Older revision		Revision as of 03:53, 15 November 2020
Line 18:		Line 18:
	#:<tt>'''distinguished_name = req_distinguished_name'''</tt>		#:<tt>'''distinguished_name = req_distinguished_name'''</tt>
	#:<tt>'''req_extensions = req_ext'''</tt>		#:<tt>'''req_extensions = req_ext'''</tt>
	#:~~<tt>''''''</tt>~~		#:
	#:<tt>'''[ req_distinguished_name ]'''</tt>		#:<tt>'''[ req_distinguished_name ]'''</tt>
	#:<tt>'''countryName = Country Name (2 letter code)'''</tt>		#:<tt>'''countryName = Country Name (2 letter code)'''</tt>
Line 30:		Line 30:
	#:<tt>'''commonName = Common Name (e.g. server FQDN or YOUR name)'''</tt>		#:<tt>'''commonName = Common Name (e.g. server FQDN or YOUR name)'''</tt>
	#:<tt>'''commonName_max = 64'''</tt>		#:<tt>'''commonName_max = 64'''</tt>
	#:~~<tt>''''''</tt>~~		#:
	#:<tt>'''[ req_ext ]'''</tt>		#:<tt>'''[ req_ext ]'''</tt>
	#:<tt>'''subjectAltName = @alt_names'''</tt>		#:<tt>'''subjectAltName = @alt_names'''</tt>

Michael Kohler: /* Apache with mod_ssl Enabled (With subjectAltName) */

2020-11-15T03:53:21Z

Apache with mod_ssl Enabled (With subjectAltName)

@@ Line 12: / Line 12: @@
 # For Apache purposes, use the key with no pass phrase to generate the CSR file.
 # Create a config file to be configured with the multiple subdomains.
-#: <tt>'''cat << EOL >> <config_file>.cnf'''</tt>
+#: <tt>'''# cat << EOL >> <config_file>.cnf'''</tt>
 # Generate the CSR from the private key using openssl.
 #: <tt>'''# openssl req -new -key <key_name>.key -out <csr_name>.csr'''</tt>

Michael Kohler: /* Generate the Certificate Signing Request (CSR) */

2020-11-15T03:51:29Z

Generate the Certificate Signing Request (CSR)

← Older revision		Revision as of 03:51, 15 November 2020
Line 4:		Line 4:
	# For Apache purposes, use the key with no pass phrase to generate the CSR file.		# For Apache purposes, use the key with no pass phrase to generate the CSR file.
	# Generate the CSR from the private key using openssl.		# Generate the CSR from the private key using openssl.
	## <tt>'''# openssl req -new -key <key_name>.key -out <csr_name>.csr'''</tt>		#: <tt>'''# openssl req -new -key <key_name>.key -out <csr_name>.csr'''</tt>
	# Enter the information as required by the prompts.		# Enter the information as required by the prompts.
	# Verify the checksum of the key matches the checksum CSR.		# Verify the checksum of the key matches the checksum CSR.
	## <tt>'''# openssl req -noout -modulus -in <csr_name>.csr \| openssl md5'''</tt>		#: <tt>'''# openssl req -noout -modulus -in <csr_name>.csr \| openssl md5'''</tt>
	=== Apache with mod_ssl Enabled (With subjectAltName) ===		=== Apache with mod_ssl Enabled (With subjectAltName) ===
	# If required follow the [[OpenSSL Generating a Private Key]] procedure.		# If required follow the [[OpenSSL Generating a Private Key]] procedure.

Michael Kohler: /* Apache with mod_ssl Enabled (With subjectAltName) */

2020-11-15T03:51:12Z

Apache with mod_ssl Enabled (With subjectAltName)

← Older revision		Revision as of 03:51, 15 November 2020
Line 14:		Line 14:
	#: <tt>'''cat << EOL >> <config_file>.cnf'''</tt>		#: <tt>'''cat << EOL >> <config_file>.cnf'''</tt>
	# Generate the CSR from the private key using openssl.		# Generate the CSR from the private key using openssl.
	## <tt>'''# openssl req -new -key <key_name>.key -out <csr_name>.csr'''</tt>		#: <tt>'''# openssl req -new -key <key_name>.key -out <csr_name>.csr'''</tt>
	# Enter the information as required by the prompts.		# Enter the information as required by the prompts.
	# Verify the checksum of the key matches the checksum CSR.		# Verify the checksum of the key matches the checksum CSR.