ComputingConfidence

Generating a Certificate Signing Request (CSR)

Whether you are getting a certificate from a CA or generating your own self-signed certificate, the first step is to generate a key.

To generate the keys for the Certificate Signing Request (CSR) run the following command from a terminal prompt:

openssl genrsa -out server.key 1024

To create the CSR, run the following command at a terminal prompt:

openssl req -new -key server.key -out server.csr

Then send the server.csr to the CA.

The CA will the email you the following files:

Copy the above crt files to /etc/ssl/certs and the key file to /etc/ssl/private and make sure only root can read this file.