10/12/2017

Linux 製作 CSR 憑證申請書

產生 Private Key 金鑰,產生 CSR 憑證申請書
openssl genrsa -out example_com.key 2048
openssl req -new -key example_com.key -out example_com.csr


CSR 憑證申請書,填寫相關資訊,請自行填寫,這裡是範例,Locality Name=城市、Organization Name=公司、Organizational Unit Name=部門、Common Name=域名
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:TW
State or Province Name (full name) []:Taiwan
Locality Name (eg, city) [Default City]:NTPC
Organization Name (eg, company) [Default Company Ltd]:Rainssn Inc.
Organizational Unit Name (eg, section) []:TD
Common Name (eg, your name or your server's hostname) []:*.rainssn.com
Email Address []:Rainssn@rainssn.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

填寫完成後,會產生 CSR 憑證申請書

申請 SSL 時,將 example_com.csr 的 CSR 憑證申請書內容貼上

而 example_com.key 則是放在伺服器的金鑰

 

沒有留言:

張貼留言