Prerequisites:

1. OPEN SSL should be installed/available on the machine where Apache Web server is installed and a private key needs to be generated.

2. OPEN SSL binaries can be downloaded from the following website if not already installed.

https://wiki.openssl.org/index.php/Binaries

3. Private key is required for generating a CSR. Click here for steps to create a private key.

Steps to be followed to generate CSR for Apache webserver:

1. Enter the following command to generate a CSR (SHA256) from the private key.

openssl req -out subdomain.domain.com.csr -key subdomain.domain.com.key -new -sha256

If you encounter the above error, add "-config" switch to the existing command and specify the openssl.cnf path. Move to step 2.

2. Generate CSR with -config switch.

openssl req -out subdomain.domain.com.csr -key subdomain.domain.com.key -new -sha256 -config "C:\Apache24\conf\openssl.cnf"

3. Verify the CSR if it is generated correctly by using the following command.

openssl req -in subdomain.domain.com.csr -config "C:\Apache24\conf\openssl.cnf" -noout -text

Look for the following line in the command output "Signature Algorithm: sha256WithRSAEncryption" to verify if the CSR has the correct signature.

Or you can go to the following website and verify the CSR.

CSR file can be opened in a notepad.

https://cryptoreport.websecurity.symantec.com/checker/views/csrCheck.jsp

4. Share the CSR with the SSL vendor to get the SSL certificate.

Steps to be followed to generate CSR in Linux

1. Enter the following command to generate a private key

openssl genpkey -algorithm RSA -out server.key -pkeyopt rsa_keygen_bits:2048

2. Enter the following command to generate a CSR from the private key

openssl req -new -key server.key -out server.csr


Fill in the required details

Country Name (2 letter code) [XX]: IN

State or Province Name (full name) [State]: Maharashtra

Locality Name (eg, city) [City]: Mumbai

Organization Name (eg, company) [Org]: Example Pvt Ltd

Organizational Unit Name (eg, section) []: IT

Common Name (e.g. server FQDN or YOUR name) []: Policy Server URL of the customer (irm.seclore.com)

Email Address []: admin@example.com

3. Verify the CSR if it is generated correctly by using the following command.

openssl req -noout -text -in server.csr

Need more help? 

Contact Seclore Support 

 support@seclore.com | Chat Live