CSR Creation for Apache SSL

https://www.digicert.com/csr-creation-mac-osx.htm

How to generate a CSR for Apache using OpenSSL

Recommended: Save yourself some time by using our new OpenSSL CSR Wizard to create your apache ssl csr. Just fill in the details, click Generate, and paste your customized openssl command into your terminal.

If you will be using Apache for Mac OS X server 10.5, see our Mac OS X CSR instructions.

Of course if you prefer to build your own shell commands to generate your apache csr, just follow our old instructions below:

1. Login to your server via your terminal client (ssh). At the prompt, type:
   
   openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr
   where server is the name of your server.
2. This begins the process of generating two files: the Private-Key file for the decryption of your SSL Certificate, and a certificate signing request (CSR) file (used to apply for your SSL Certificate) with apache openssl.
   When you are prompted for the Common Name (domain name), enter the fully qualified domain name for the site you are securing. If you are generating an Apache CSR for a Wildcard SSL Certificate your common name should start with an asterisk (such as *.example.com).
   You will then be prompted for your organizational information, beginning with geographic information. There may be default information set already.
   This will then create your openssl .csr file.
3. Open the CSR file with a text editor and copy and paste it (including the BEGIN and END tags) into the DigiCert Certificate order form.
4. Save (backup) the generated .key file as it will be required later for Certificate installation.
5. After you receive your SSL Certificate from DigiCert, you can install it.
   
   
   
   
   
   
   
   
   How to generate a CSR for Mac OS X (version 10.5)

   1. Start the Server Admin tool and login to the server for which you will be configuring SSL.
   2. Click on the Certificates tab, and then the + button to create a new certificate.
   3. Enter the requested information for your organization as follows -
      Common Name - The name through which the site or server will be accessed (e.g., www.domain.com).
      Organization - The legally registered name of your organization/company.
      Organization Unit - The name of your department within the organization (frequently this entry will be listed as "IT" or is simply left blank).
      City - The city in which your organization is located.
      State - The state in which your organization is located.
      Country Code - If you do not know your country's two digit code, find it on our list.
      Private Key Size: - DigiCert requires 2048 bit private keys because 1024 bit keys are considered insecure.
      Private Key Passphrase: - Not required. If entered, you will use this password again when importing your certificate.
   4. Click the Save button to save your CSR data. Next, click on the wheel icon to "Generate Certificate Signing Request (CSR)." A new window will open.
   5. You can now either click and drag the CSR file into the order process, as instructed, or drag that icon onto your desktop to upload at your convenience.
      
   6. After you receive your SSL Certificate from DigiCert, you can install it.
      See Mac OS X SSL Certificate Installation.

   In addition to creating your Mac OSX Certificate Signing Request in the Graphical User Interface, advanced users may want to try working with Apache directly when creating their MAC OSX CSR.