Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [csr]

A CSR (Certificate Signing Request) is a block of data containing information that will be included in your certificate such as your organization name, common name (domain name), locality, and country. It also contains the public key that will be included in your certificate. A private key is usually created at the same time that you create the CSR.

21
votes
4answers
23k views

Can I reuse a SSL CSR?

I've generated a self certified SSL cert for testing a new web site. The time has come for the site to go live and I now want to purchase a cert from GeoTrust. Can I use the same CSR that I generated ...
2
votes
1answer
950 views

Generating certificate signing request for ESXi 5.5

I would like to replace the (self signed) SSL certs on various ESXi 5.5 hosts with ones generated by our own CA. I found docs on the VMware site on how to overwrite the key and cert files on the ESXi ...
0
votes
1answer
2k views

CSR: Extract PKCS#10 contained in a PKCS#7

Hi eveyone: let's see if someone can help me ;) I'm quite noob at this field so please be gentle. At my job someone passed me a CSR. This CSR is a PKCS#10 request enveloped in a PKC#7 request. My task ...
166
votes
1answer
145k views

What is a challenge password?

I'm setting up SSL on an Ubuntu server. One of fields it asks for as part of setting up the CSR is a "challenge password". What is that? The default is blank. Do I need to enter one?
8
votes
1answer
8k views

Where is the private key after using certreq for CSR generation on Windows 10?

I tried to follow the website below for instructions on how to generate the CSR for my web server: http://www.entrust.net/knowledge-base/technote.cfm?tn=8649 However, it only generates the CSR. ...
1
vote
0answers
45 views

CNG Certificate Request, certificate needs to use CryptoAPI (legacy)

We've created a CSR with Template "(No template) CNG key" and received our certificate from a valid CA. However, it seems our product (VMWare Horizon) doesn't like CNG and we are trying to figure if ...
-1
votes
1answer
510 views

Convert text certificate to crt file

I sent the .CSR file to my client, and they send me the final certificate in text code (copy paste into the mail). Can I convert this code into file .CRT ? The code is OK, I have tested in: https://...
0
votes
0answers
436 views

Generating a CSR with next-generation Cryptographic Service Provider (CSP) using mmc

So...following the recommendations found here, my goal is to get a code-signing certificate which uses the "Microsoft Enhanced RSA and AES Cryptographic Provider" (type 24) CSP. Using Microsoft ...
1
vote
1answer
2k views

Generating certificate for iLO

I want to generate a proper certificate for iLO web console (iLO is a management engine for HP servers) using letsencrypt. AFAIK there's no way to install private key into iLO, so I've generated CSR ...
1
vote
2answers
682 views

Can we create certificate sign request (CSR) using HSM?

Can I generate a CSR using HSM? If Yes, then Please guide us. It would be very helpful. Following are our system details: We have HSM(SafeNet) Simulator to test developement application. we are ...
0
votes
1answer
818 views

Trouble with Subordinate CA - Unable to submit CSR

I have a Subordinate CA running on Windows 2016 Server - its been issuing certs until recently where I am now only ever getting the error when trying to submit a CSR: The request contains no ...
5
votes
1answer
22k views

OpenSSL - Add Subject Alternate Name (SAN) when signing with CA

How can I add a Subject Alternate Name when signing a certificate request using OpenSSL (in Windows if that matters)? I've generated a basic certificate signing request (CSR) from the IIS interface. ...
0
votes
0answers
58 views

5 domain UCC SSL not working for the domain url with www

I have a AWS lightsail server in which I created 5 domains in it using Plesk web admin. I am having single IP for all the domains since the lightsail server only provides 1 IP for single server. I am ...
0
votes
1answer
372 views

Zevenet Load Balancer - SSL Certificate

I am really new to this so please be nice :) I am wondering if anyone has any experience with Zevenet Load Balancers. I have setup the community version (V4). I have 2 web servers with replicated ...
2
votes
1answer
237 views

Website certificate detail does not match server CSR

I am running into a weird problem. We just took our SSL-enabled site live. But when I went to the site, it was given the "SEC_ERROR_UNKNOWN_ISSUER" error. When I then look at the certificate detail or ...
9
votes
3answers
22k views

Adding Subject Alternate Names (SAN) to an existing Cert Signing Request (CSR)

Can any one tell me how I an add a number of Subject Alternate Names to an existing CSR? I'm not talking about generating a CSR with SANs or adding SANs at signing time - I know how to do both of ...
1
vote
1answer
374 views

How to generate the CSR on Google Cloud Platform [closed]

I'm going to buy a SSL in order to install it in my e-commerce. I need to generate the CSR first before to buy the certification. Anybody have a tutorial in order to generate the CSR? Thanks.
0
votes
1answer
197 views

Allow Internal CA to sign CSR

So as it says, how am I supposed to allow Internal CA to sign CSR? This would be for scenarios where you cannot easily replace a private key for a client so the preferred process uses CSR's instead. ...
3
votes
3answers
11k views

openshift : unable to write 'random state'

I am trying to generate a CSR using openssl on openshift. I have been encountering this when I run the command using SSH. openssl genrsa -des3 -out myApp.key 2048 Generating RSA private key, 2048 bit ...
-1
votes
1answer
406 views

CSR creation for Azure Website

I have hosted an ASp.net core web application as an Azure Website. Since you cannot do a remote desktop connection and create a CSR file, Im at a loss as to how to create one for this file. As ...
50
votes
2answers
38k views

Must CSRs be generated on the server that will host the SSL certificate?

Is it necessary to generate the CSR (Certificate Signing Request) on the same machine that will host my web application and SSL certificate? This page on SSL Shopper says so, but I'm not sure if that'...
17
votes
2answers
7k views

Does it matter where the CSR and key files for SSL certification are generated?

I have to create a CSR for a wildcard SSL certificate. Some FAQs from SSL providers say that I should generate the CSR file on the machine where I want to install the certificate? My understanding is ...
0
votes
2answers
45 views

What is the significance of the 'Certificate name' field in AWS Load Balancer security?

I adding a CSR (generated by the PM) to a new AWS Load Balancer in. I have the key's etc, however I'm unsure the significance of the 'Certificate name' field in the page's settings. Is it arbitrary ...
0
votes
1answer
725 views

Difference between CSR creation and create domain certificate

I'm a CA admin and I'm new to this field, Can any one explain the below scenario and explain the difference between them. Scenario 1 System Admin creates a CSR file and give it to me... I will ...
5
votes
1answer
11k views

certreq.exe unable to to submit Base64 CSR - Invalid Data

I am trying to script a solution to automatically submit Base64 CSRs to a Microsoft Certificate Services CA, but keep getting tripped up. My understanding is that all I should need to specify is a ...
0
votes
2answers
3k views

Passed SSL checker, but browser doesn't show secure?

I've set up my SSL certificate following the instructions at http://splittingelectrons.wordpress.com/2012/02/24/how-to-configure-an-ssl-certificate-for-apache-on-amazon-ec2/ I've checked my website ...
0
votes
2answers
6k views

openssl generate .key from CSR

A customer sent me a CSR and the .CER of a certificate for a linux server that I host. The customer does not have access to this machine. Is this enough data to generate a valid certificate? Is it ...
0
votes
0answers
30 views

CSR created for unrequested domains

Trying to create csr for domain.com only. Key first: # openssl genrsa -out domain.com.key 2048 Generating RSA private key, 2048 bit long modulus .........................................................
0
votes
1answer
542 views

Lost my key file when I generated the csr

This is the first time for me dealing with ssl. I have created a csr file, but I lost the key file in this generation. The certificate was issued and I got all the crt files. Now I want to install it ...
1
vote
2answers
48 views

Creating local self-signed Certificate for user 'tomcat'

When I installed Tomcat 8 on my Ubuntu 15.04 I used the following command to create the user "tomcat": sudo adduser \ --system \ --shell /bin/bash \ --gecos 'Tomcat Java Servlet and JSP engine' ...
-1
votes
2answers
111 views

Will CSR become invalid

I have a domain registered with namecheap and server instance is aws ec2 (windows machine running node js) , cname record pointing to ec2 instance's public ip. Now i want to configure ssl on it , I ...
8
votes
1answer
2k views

Can I get anSHA-256 certificate when the CSR is for SHA-1?

I've read: By default, OpenSSL cryptographic tools are configured to make SHA1 signatures. for example, if you want to generate a SHA256-signed certificate request (CSR) , add in the command line:...
0
votes
2answers
2k views

XCA Signing Problem

I am trying to make a self-signed SSL Certificate for Sun WebServer 6.1 using the XCA Certificate GUI. Here is my process: Login to Sun Webserver admin console. Use the "Generate CSR" function to ...
0
votes
1answer
509 views

How to add multiple X509v3 Subject Alternatve names during cerificate request (CSR generation) without editing openssl.cnf file

I want to generate CSR for two domains. I have tried according to this http://apetec.com/support/GenerateSAN-CSR.htm But there is no such section available in openssl.cnf file and i don't want to ...
1
vote
1answer
1k views

md5 sum of private key is different from that of certificate and CSR

the output of: openssl req -noout -modulus -in presentCSR.csr and openssl x509 -noout -modulus -in server_new.crt | openssl md5 matches. But the output of openssl rsa -noout -modulus -in server....
2
votes
1answer
2k views

Unable to sign certificates as CA using pkitool and easy-rsa script for OpenVPN .csr file

OpenVPN server on Ubuntu 14.04. Easy-rsa on the certificate authority server on Ubuntu 14.04. Done this way because I want the ca.key file to be separate from the machine that acts as the openvpn ...
-1
votes
1answer
357 views

-nodes function during CSR creation with OpenSSL

This is a typical command to create CSR and private key with OpenSSL. openssl req -nodes -newkey rsa:4096 -keyout myserver.key -out server.csr What is the function of -nodes in the command line? I ...
8
votes
2answers
547 views

Windows PKI: How can I import, sign/issue and export a large number of CSRs?

I have a lot of CSRs that I need to have signed/issued and exported in windows. I was hoping I could batch process them somehow (certutil sounds like it can do some of the work) but I'm not quite sure ...
1
vote
2answers
122 views

CSR & Common Name Uncertainty?

I am unsure what to exactly put in here on windows server 2008 when creating the CSR file. My wesbite is example.com. with the other links in the form of: example.com/index.php/example So what ...
0
votes
1answer
603 views

SBS 2008 CSR remove .local

SBS 2008 server the third party SSL certificate has just expired!! trying to renew with a two year, SAN/Multi-Domain SSL going through the SBS Console Adding a new cert and get the CSR copy/paste ...
0
votes
1answer
3k views

Is it possible to convert a 1024 CSR to a 2048 CSR? (Sun ONE Webserver 6.1)

For a 2004 software combination (which means a 2004 webserver) it is letting out a CSR with a 1024 key length. The company we have been purchasing the SSLs from requires a 2048 bit key length. It it ...
2
votes
1answer
3k views

override specific DN fields when signing csr

When signing CSR on CA side, how can I override specific DN fields by custom value? I want to ignore what is written in CSR. For example in C= and O= fields and replace them by something static. Other ...
0
votes
3answers
2k views

Install godaddy ssl certificate on amazon ec2

I'm new to setting up ssl certificate and csr, i want to use public ip instead domain name in ssl. i created a csr file using following command and info openssl req -new -newkey rsa:2048 -nodes -...
2
votes
0answers
391 views

Windows - Replace subject from CSR when issuing certificate

I've received a CSR from a client with a CN, but not with all the subject fields we require. According to this answer from Scott*, it should be possible to specify the final subject values when the ...
11
votes
1answer
924 views

Does generating a CSR through IIS 7.5 on Windows Server 2008 R2 always create a new private key?

Generating a CSR for a Windows 2008 R2 server and need to ensure that the private key used for the CSR is new. I have used OpenSSL before to create my own self-signed certs for testing and if I ...
2
votes
1answer
578 views

How Do I Create a New CSR Using the Data From a Previous CSR?

I need to get SSL certificates reissued for about 30 of my clients. I was hoping for an easy way to get the contents of their currents CSRs, pipe them in to openssl req -new ... and generate a whole ...
1
vote
2answers
2k views

Is it possible to batch sign CSRs (with certutil for instance)?

I have about 100 CSR to sign on a windows PKI. I would like to know if it's possible to batch submit, issue and export these CSRs via batch or powershell script, maybe using cert util, and how to do ...
2
votes
2answers
2k views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
1
vote
1answer
176 views

When do SSL certs require a dedicated IP, and when don't they? [duplicate]

My host has informed me that I need to purchase a dedicated IP from them in order to use a SSL cert I want to buy. I don't believe them. Is there a way to leave them out of the loop and get this done ...
2
votes
2answers
215 views

SSL certificate. Can it apply to more domains in future?

What can I do if I have completed a CSR for "domainA.com" but later want it to also apply to "domainB.com"? I'm assuming there aren't many options once the CA has issued the license, apart from ...