Date: Mon, 13 Jul 1998 16:22:26 -0700 From: Joe Read <joer@triax.com> To: isp@FreeBSD.ORG Subject: Re: Fw: Generating CSR with Apache 1.3 + SSLeay 0.9 Message-ID: <19980713231656.AAA9678@joe.triax.com>
index | next in thread | raw e-mail
[-- Attachment #1 --]
Attached was the message I got from Verisign about generating the CSR
file to create a certificate with them. Hope this comes in handy
for anyone else out there converting from IIS to apache...
>Hello,
>
>Please note the attached file for CSR instructions for Apache.
>
>Thank you,
>
>VeriSign, Inc.
>Phone: 650-429-3400
>Fax: 650-961-8870
>Email: ca-support@verisign.com
[-- Attachment #2 --]
╨╧рб▒с > ■ ■ ▄еh cр e ж &% ж ~ ~ ~ ~ ~ ~ ~ ╕ ╕ ╕ ╕ ╕ ╕
┬ ╕ M$ 1 ╪ ╪ ╪ ╪ ╪ ╪ ╪ ╪
( 7 | │ | /$ ~$ X ╓$ P M$ ~ ╪
╪ ╪ ╪ ╪ M$ ц ~ ~ ╪ ╪ ц ц ц ╪ ~ ╪ ~ ╪
"ШFх}╜Т а ~ ~ ~ ~ ╪
ц ' ц GENERATING A CERTIFICATE SIGNING REQUEST USING SSL-EAY
The following information is derived from the SSL-EAY FAQ ( ) and the SSL-users discussion group archives (http://remus.PrakInf.TU-Ilmenau.DE/ssl-users/index.html). For more detailed
information, please consult these sources, or e-mail your questions to ssl-users@ mincom.oz.au
Certificates are generally stored at ServerRoot/ssl/certs/hostname.cert. Key files are generally stored at ServerRoot/ssl/private/hostname.key.
Generating certificates and private keys
In order to generate a private key and a certificate signing request (CSR) you simply
need to have a "ssleay" executable built.
This is normally installed in /usr/local/ssl/bin and if this is not in your path then you need to use
/usr/local/ssl/bin/ssleay rather than just ssleay in the following examples.
1 Create random state
You need to generate some random information for input into the key generation process. You can
delete or alter the rand.dat file at any time as the exact contents of it are not important.
head -25 * > rand.dat
OR
ssleay md5 * > rand.dat
OR
cat file1 file2 file3 > rand.dat
2. Generate a private key protected with a passphrase
ssleay genrsa -rand rand.dat -des 1024 > key.pem
OR (if you want to use triple DES)
ssleay genrsa -rand rand.dat -des3 1024 > key.pem
Note: Do not forget your passphrase otherwise your key will be unable to be used.
Make a back-up copy of your private key on a floppy drive and save it in a secure location, such as a safe deposit box. Your private key is never sent to VeriSign, so if your private key is lost or corrupted, you must have a backup if you are to retain the use of your certificate.
4. Generate a certificate signing request (CSR)
A certificate signing request (CSR) is what you send to VeriSign to sign
and return in the form of a certificate which can used in combination with the private key you have
generated.
Enter the following command
ssleay req -new -key key.pem -out csr.pem
where key.pem is the name of the key which you generated in step 2, and csr.pem is the name of the output CSR file.
You will be prompted for the following information:
Your country code. Enter the two letter ISO abbreviation for your country (e.g. au for Australia, gb for the United Kingdom, mx for Mexico, etc.)
The full name of your state or province. Please spell out in full (e.g. use New South Wales instead of NSW)
Enter the name of your city, town, or other locality
Enter the name of your organization. This should be the organization that owns the domain name (step 1 of the VeriSign enrollment process) and for which you have Proof of Right (Step 2 of the VeriSign Enrollment process)
Enter the name of your unit within your organization (e.g. Marketing, Sales, MIS, etc.)
Enter the fully qualified domain name of your site (e.g. www.bookstore.com). This must match the https URL that you are planning to use. It must also end in a domain name that your organization owns.
If you are prompted for "extra attributes, " simply ignore.
5. The contents of csr.pem should look something like the following:
-----BEGIN CERTIFICATE REQUEST-----
MIIBETCBvAIBADBXMQswCQYDVQQGEwJBVTETMBEGA1UECBMKU29tZS1TdGF0ZTEh
MB8GA1UEChMYSW50ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMRAwDgYJKoZIhvcNAQkB
FgFgMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAL6nPTy3avNgbubx+ESmD4LV1LQG
fcSh8nehEOIxGwmCPlrhTP87PaA0XvGpvRQUjCGStrlQsd8lcYVVkOaytNUCAwEA
AaAAMA0GCSqGSIb3DQEBBAUAA0EAXcMsa8eXgbG2ZhVyFkRVrI4vT8haN39/QJc9
BrRh2nOTKgfMcT9h+1Xx0wNRQ9/SIGV1y3+3abNiJmJBWnJ8Bg==
-----END CERTIFICATE REQUEST-----
6.Copy the entire contents of this CSR (including the BEGIN CERTIFICATE REQUEST and END CERTIFICATE REQUEST lines) and paste into Step 4 of the VeriSign enrollment.
д╨/ер=жзиайак 7 9 S x В Н Х ┐ ╔ ╓ ▐ ж ╜ ■√∙ ў ў ў ў ї u P VБ UБVБ UБ
7 8 9 є R S ф х ц g С Т ° E F \ ] ╜ 2 6 O S u v м н ▀ 6 7 8 К Л М ж ■ └!щ ■ └!щ ■ └!щ ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы ▌ └!ы
hШ■ 4 8 h . 'ж з ┌ █ $
И
У
Ф
░
▒
█
▄
P Q Е Г ╕ Ц
ю
╢ ╖ Ї ї ў < = a в у $ e ж █ ¤ у └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы └ └!т└ └!т└ └!ў └ └!╬└ └!ў └ └!тс └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы с └!ы
hШ■ 4 h ╖ 4 8 h . "¤ ■ д е ж ■ └!ы ■ └!ы ■ └!ы ■ └!ы ■ └!ы K @ё Normal a " A@Є б " Default Paragraph Font ■oЄ ё CITE VБ ж ж ! ▄ ж t ╜ ж ¤ ж
ж ▌ : D E Q x В Г Ж Н Ъ ┐ ╔ ╩ ═ ╓ т w } ╗ ╛ # ) ╤ ┘ ) 1 7 = F N l t б л о ┤ ╡ ╗ ╜ ┴ ┬ ╩ ╠ ╧ ╫ ▐
. 5 Q [ ▒ ╖ ╕ ╗ ╞ ═ ╙ ┌ т щ $ + ч щ ' 8 O T
и ' ISG C:\WINDOWS\Desktop\ssleaycsr.doc @Abbott \\CORPBDC\Abbott HPLJ5SI2 Abbott Abbott Ф ш w ъ
od X X └ ╚ ╤2Й №╝╔╠:k R ┬ d Custom page 1 РB РB Custom page 2 РB РB Custom page 3 РB РB Abbott Ф ш w ъ
od X X └ ╚ ╤2Й №╝╔╠:k R ┬ d Custom page 1 РB РB Custom page 2 РB РB Custom page 3 РB РB А д д
д
1 Р Times New Roman Р Symbol &Р Arial " qИ ╨ h ac%Fac%F Г ! P 6GENERATING A CERTIFICATE SIGNING REQUEST USING SSL-EAY ISGISG
■ ¤ ■ ■ ■ R o o t E n t r y └!ы └!ы └!ы └!ы └!ы └!ы └!ы └ F └!ы "ШFх}╜ └ └!W o r d D o c u m e n t └!ы └!ы └!т └!т └!ў └!╬ └!ы └!ы └!ы └!ы └!ы └!ы &% └!ы C o m p O b j └!ы └!ы └!ы └!ы └!ы └!ы └!ы j b S u m m a r y I n f o r m a t i o n F 2 G( IFICATE SIGNING REQU ф ■ ■
■ ■
└ F Microsoft Word Document
MSWordDoc Word.Document.6 Ї9▓q ■ рЕЯЄ∙OhлС +'│┘0 ┤ Ш а р ь ° $ 0 <
d p |
И Ф Ь д м ф 7 GENERATING A CERTIFICATE SIGNING REQUEST USING SSL-EAY оC ISG 4D Normal.dot ISG 1 \ Microsoft Wo D o c u m e n t S u m m a r y I n f o r m a t i o n 8
■ ╒═╒Ь.УЧ +,∙о0 р H P h p x А И Р ф VeriSign Inc., > 7 GENERATING A CERTIFICATE SIGNING REQUEST USING SSL-EAY rd for Windows 95 @ @ @ &Б'х}╜@ &Б'х}╜ ■ ╒═╒Ь.УЧ +,∙о0 р H P h p x А И Р ф VeriSign Inc., > 7 GENERATING A CERTIFICATE SIGNING REQUEST USING SSL-EAY
[-- Attachment #3 --]
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19980713231656.AAA9678>