Créer son CSR sous Linux (avec openssl) |
Utilisez la commande openssl pour générer à la fois votre clef privée et votre CSR. Attention: Votre CSR doit étre genere avec au minimum 2048 bits. Commande shell
openssl req -newkey rsa:2048 -new -nodes -keyout myprivate.key -out myserver.csr
Vous allez alors obtenir ceci : (Ne specifiez pas de mot de passe) Résultat:
Generating a 2048 bit RSA private key
Puis, éditer le fichier 'myserver.csr' pour récuperer votre CSR.............................................................+++ .........................................+++ writing new private key to 'myserver.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [XX]:FR State or Province Name (full name) []:Province Locality Name (eg, city) [Default City]:Paris Organization Name (eg, company) [Default Company Ltd]:Digitalix Organizational Unit Name (eg, section) []:Security Section Common Name (eg, your name or your server's hostname) []:www.digitalix.fr Email Address []:support@digitalix.fr Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []: |