SSL Certs & CSR Generation

5 posts / 0 new
Topic locked
Last post
#1 Wed, 11/15/2006 - 10:00
TimBenoit

SSL Certs & CSR Generation

I've generated a CSR, but the CA we're going through (Geo Trust) says that because there is no "Locality/City" in the CSR they will not provide the cert.

Any thoughts on how to get this taken care of?

Thu, 11/16/2006 - 20:45
TimBenoit

Any thoughts on this one?

Fri, 11/17/2006 - 11:03
Joe
Joe's picture

Hey Tim,

I'll ask Jamie to add a field for "City or Locality" to the CSR generation form (not sure why it isn't there already). It'll be in virtual-server 3.30.

In the meantime, you can manually generate a csr and key with the following commands:

<i>openssl genrsa -out domainname.key 1024</i>
<i>openssl req -new -key domainname.key -out domainname.csr</i>
...Answer the questions...

To see what's in the CSR (for verification before sending, for example):

<i>openssl req -noout -text -in domainname.csr</i>

Make sure you hang on to that .key file! That's your key--you'll need it to start the webserver with the cert you get.

--

Check out the forum guidelines!

Fri, 11/17/2006 - 11:19
Joe
Joe's picture

You know, I can't see any reason why I didn't include a field for the city in the first place! This will be added in the next Virtualmin release..

--

Check out the forum guidelines!

Sun, 11/19/2006 - 06:46
TimBenoit

Thanks for the help. I've successfully generated the CSR using the manual method :)

Topic locked