Register or login to post to the forum.
26 Sep, 2015 17:02

Notes and help on SSL, CSR, Keychains, etc....

Generate SSL Key and CSR.txt

How to Generate a Certificate Signing Request - Gather This Data FIRST.

Country Name (2 letter code) [AU]:
State or Province Name (full name) [Some-State]:.
Locality Name (eg, city) []:.
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Generate the CSR itself with the key

Obviously change "" to be the domain name for the certificate and run this code from terminal on Linux or a Mac:

openssl req -new -newkey rsa:2048 -nodes -keyout -out

If a pass phrase is applied to the key you will need that as well to upload a key that matches the resulting certificates without a passphrase. This is actually the most secure and recommended method but does require more collaboration as people always forget their passwords.

06 Apr, 2016 03:50

LetsEncrypt cert automation

A new github project for letsencrypt headed towards automation of ssl installs. This is critical because letsencrypt is free, but only lasts 90 days per cert. So it has to be automated encryption and updates