CSR: Apache + Raven

Follow these instructions to generate a CSR for your Web site. When you have completed this process, click the "close" button below to close this window and continue to the next step.

Note: The CertificateSigning Request (CSR) instructions are followed by key pair backup instructions.

  1. Enter Server Name (Common Name).

  2. Select size of encryption key (1024 recommended).

    *Note: The encryption key size (512 bit, 1024 bit) has nothing to do with the actual session key (128 bit, 40 bit).

  3. Enter pass phrase to encrypt key.

    Warning: If you lose the passphrase, you must purchase another certificate.

    See the certificate replacement policy at the bottom of these instructions.

  4. Choose the server to request a certificate for:
      Note: If you select no, a required field will be missing and the CSR will be invalid.
  5. Version 1.5.1 select NO to send the CSR to Verisign
    Version 1.5 select YES to send the CSR to Verisign
    Version 1.5x enter the same pass phrase entered generating the private key above. 

  6. Enter the information to be displayed in the certificate. 

    Distinguished Name Field

    Explanation

      Example

    Country Name

    The two-letter ISO abbreviation for your country.

    US = United States 

    State or Province Name

    The state or province where your organization is located. Can not be abbreviated.

    Georgia

    City or Locality

    The city where your organization is located.

    Atlanta

    Organization Name

    The exact legal name of your organization. Do not abbreviate.

    GeoTrust Inc.

    Organizational Unit

    Optional for additional organizational information.

    Marketing

    Common Name (Server Host Name)

    The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

    If you intend to secure the URL https://secure.geotrust.com, then your CSR's server hostname must be secure.geotrust.com

    Server Admin.'s email address

    Your email address

    abc@geotrust.com

  1. Send the CSR to your email address or display the CSR on your console.

  2. Exit RavenCTL 

  3. While waiting for your certificate from GeoTrust, you can use the self-signed certificate generated above.

    **** Note: If you would like to verify the contents of the CSR, use the following command: $ openssl req -noout -text -in server.csr
  1. Create a backup copy of the private key.

Backup the servername.key file from the raven/module/pki/keys directory to a secure location and remember the PEM passphrase (step 3). 

**** Note: To view the contents of the private key, use the following command: $ openssl rsa -noout -text -in servername.key

  1. Submit your CSR to GeoTrust by clicking on <Continue>, you will be asked to complete the agreement and the enrollment form as well.

  • 0 کاربر این را مفید یافتند
آیا این پاسخ به شما کمک کرد؟

Related Articles

Generating a Certificate Signing Request (CSR) using Apache mod_ssl/OpenSSL

  A CSR is a file containing your certificate application information, including your...

CSR Generation: WHM/CPanel

Generating a CSR using WHM/CPanel Generate an SSL certificate   You can generate an SSL...

CSR Generation: HSphere

Generating a Certificate Signing Request (CSR) in H-Sphere Log into your user Control Panel....

CSR Generation: cPanel 11

cPanel's SSL/TLS functions are handled by the SSL/TLS Manager module. This area will...

CSR: Apache + ApacheSSL

Follow these instructions to generate a CSR for your Web site. When you have completed this...