Create a certificate signing request (CSR)

A certificate signing request (also CSR or certification request) is a message sent from an applicant to a certificate authority in order to apply for a digital identity certificate.

Taggings:

Submitted by Corinna Kirner on Sun, 12/07/2014 - 08:16
2 answers

Solution on creating a CSR

The simplest way to generate a CSR in unix systems is through terminal.
First we create our private key, then create a certificate signing request.

  • Generating our key
    openssl genrsa -out keyname.key 2048
  • Creating a CSR
    openssl req -new -key keyname.key -out MyCsr.csr

    • After that, we take our CSR and submit it to a certificate authority

    Submitted by Ivan Pavkovic on Sun, 12/07/2014 - 14:09

    Create CSR via command line

    Step 1: Generate a RSA Private Key (How to generate a RSA Private Key)

    Step 2: Generate a CSR (Certificate Signing Request)
    Type this command into your consoel:
    openssl req -new -key private.key -out certificate.csr

    Next you have to enter the pass phrase from your previously generated private key:
    Enter pass phrase for private.key:

    During the generation process of the CSR you will have to provide some information for the X.509 attributes like a Country Name, but you don't have to provide all of the asked information. If you enter '.', the field will be left blank.

    Snippet from the console output of the asked information:
    ...
    Country Name (2 letter code) [AU]: .
    State or Province Name (full name) [Some-State]: .
    Locality Name (eg, city) []: .
    ...

    After this steps your certificate has been successfully generated.

    Submitted by Corinna Kirner on Sun, 12/07/2014 - 09:06