Prerequisites:


1. OPEN SSL should be installed/available on the machine where Apache Web server is installed and a private key needs to be generated.

2. OPEN SSL binaries can be downloaded from the following website if not already installed.

https://wiki.openssl.org/index.php/Binaries

3. Private key is required for generating a CSR. Click here for steps to create a private key.


Steps to be followed to generate CSR for Apache webserver:


1. Enter the following command to generate a CSR (SHA256) from the private key.


openssl req -out subdomain.domain.com.csr -key subdomain.domain.com.key -new -sha256




If you encounter the above error, add "-config" switch to the existing command and specify the openssl.cnf path. Move to step 2.



2. Generate CSR with -config switch.


openssl req -out subdomain.domain.com.csr -key subdomain.domain.com.key -new -sha256 -config "C:\Apache24\conf\openssl.cnf"



3. Verify the CSR if it is generated correctly by using the following command.

openssl req -in subdomain.domain.com.csr -config "C:\Apache24\conf\openssl.cnf" -noout -text


Look for the following line in the command output "Signature Algorithm: sha256WithRSAEncryption" to verify if the CSR has the correct signature.




Or you can go to the following website and verify the CSR.


CSR file can be opened in a notepad.


https://cryptoreport.websecurity.symantec.com/checker/views/csrCheck.jsp


4. Share the CSR with the SSL vendor to get the SSL certificate.


Need more help? 

Contact Seclore Support 

 support@seclore.com Chat Live