vincent's Blog

1.create private key

No password
/usr/sbin/sslgenrsa -rand /dev/urandom -out ssl.key/server.key
chmod go-rwx ssl.key/server.key

need password

/usr/sbin/sslgenrsa -rand /dev/urandom -out ssl.key/server.key 1024


2.create .csr

/usr/bin/openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr
/usr/bin/openssl req -new -key /etc/httpd/conf/server.key -out /etc/httpd/conf/server.csr

Country Name (2 letter code) [AU]:
State or Territory Name []:Queensland
Locality (City) Name []:Port Lincoln
Company (Organisation) Name []:Test Company
Department Name []:Testing
Common Name []:test.mydomain.com
Administrators E-mail address []:admin@mydomain.com
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []: