Skip to content

Generatring a 1024 bit CSR

note replace server with FQDN.





From Akadia SSH cert page





Step 1: Generate a Private Key



openssl genrsa -des3 (-aes256) -out server.key 1024 (4096)(8192)



Check TLS1.3 for updates



Step 2: Generate a CSR (Certificate Signing Request)



openssl req -new -key server.key -out server.csr



Step 3: Remove Passphrase from Key



cp server.key server.key.org

openssl rsa -in server.key.org -out server.key



The newly created server.key file has no more passphrase in it.



-rw-r--r-- 1 root root 745 Jun 29 12:19 server.csr

-rw-r--r-- 1 root root 891 Jun 29 13:22 server.key

-rw-r--r-- 1 root root 963 Jun 29 13:22 server.key.org





Step 4: Generating a Self-Signed Certificate



openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt



Trackbacks

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Form options