Tuesday 27 March 2012

SSL CSR Creation

Another reminder post of OpenSSL switches (who can remember them all?)

When hosting customers are after a new SSL certificate from a 3rd party company such as Comodo, Thwaites and alike, they’ll need a CSR generating.   Using OpenSSL, this will create a unique key and a CSR file after the fields are filled in.
openssl req -new -newkey rsa:2048 -nodes -keyout customer.key – out customer.csr

When filling in the common name details, it’s often wise to keep the same details as entered previously.  If it’s the first time, make a note of them.

The rsa:2048 section is the type and size of encryption.