Crea&ng a Cer&ficate Signing Request (CSR)
1. Create a Private Key & a Digital Cer2ficate
openssl req -sha256 -newkey rsa:2048 -keyout webserver_private.pem -out
webserver_cert_req.pem
Password à udemyweb
kjoy@imac ~ % openssl req -sha256 -newkey rsa:2048 -keyout webserver_private.pem -
out webserver_cert_req.pem
Genera2ng a 2048 bit RSA private key
.................................+++++
.............................................................................................................+++++
wri2ng new private key to 'webserver_private.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter informa2on that will be incorporated
into your cer2ficate request.
What you are about to enter is what is called a Dis2nguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be le_ blank.
-----
Country Name (2 leaer code) []:UK
State or Province Name (full name) []:England
Locality Name (eg, city) []:London
Organiza2on Name (eg, company) []:Cloudalchemy
Organiza2onal Unit Name (eg, sec2on) []:Tutorials
Common Name (eg, fully qualified host name) []:cloudalchemy.uk
Email Address []:
[email protected]Please enter the following 'extra' aaributes
to be sent with your cer2ficate request
A challenge password []:S3cur1ty
2. View the contents of the cer2ficate
openssl req -text -noout -verify -in webserver_cert_req.pem