6/02/2011

CSR : Certificate Signing Request

How to Generate CSR use OpenSSL

1. Create a RSA private key for your Apache server, PEM-formatted:

#openssl genrsa -out domain.com.key 1024

2. Create a Certificate Signing Request using the RSA private key created above (output will be PEM format):

#openssl req -new -key domain.com.key -out domain.com.csr

Note that the Common Name field is the field where the domain name should be stated.

How to setup CSR

1. Copy your issued certificate, intermediate certificate and key file (generated when you created the Certificate Signing Request (CSR)) into the directory that you will be using to hold your certificates.
2. Open the Apache ssl.conf file and add the following directives: *

SSLCertificateFile /path to certificate file/your issued certificate *
SSLCertificateKeyFile /path to key file/your key file *
SSLCertificateChainFile /path to intermediate certificate/gd_intermediate_bundle.crt

Save your ssl.conf file and restart Apache.