Generating a Certificate Signing Request (CSR) for Apache SSL using OpenSSL
Step 1: Prepare your Apache server
In order to be able to use SSL with your Apache server, you will need to have OpenSSL installed on your Apache server.
Step 2: Create your Certificate Signing Request
To generate a key pair consisting of Private Key and Certificate Signing Request (CSR) use the following command:
openssl req -new -nodes -keyout myserver.key -out server.csr
You will now be asked to enter the following data for your CSR:
- Country Name: Enter the two-letter country code for your country.
- State or Province Name: Enter the name of the State or Province in which your organization operates. Do not abbreviate.
- Locality Name: Enter the name of your city, town, or other locality.
- Organization Name: Enter the name of your organization.
- Organizational Unit: Enter the name of your division, department, or other operational unit of your organization.
- Common Name: Enter the domain name that you want to use your SSL certificate with.
- E-mail address: Enter your e-mail address.
- Challenge Password: Enter '.' to leave the field blank.
- Optional Company Name: Enter '.' to leave the field blank.
You will now have created two files, the Private Key file named myserver.key and Certificate Signing Request (CSR) file named server.csr
When asked to "Copy & Paste" your CSR into the CSR field during the order process, open the server.csr file with a text editor and copy and paste the content into the CSR field on the order form.
Additional information
Apache-SSL
Mod_SSL Documentation
OpenSSL Documentation
Apache Documentation
For Mac OS X client specific information visit
http://developer.apple.com/internet/macosx/modssl.html
