Comments on: How to generate Certificate Signing Request (CSR) file with Apache OpenSSL

By: ajay

ajay — Sun, 07 Aug 2011 11:04:03 +0000

it is good . good article easy to understand
thanks.

By: Colin

Colin — Sun, 27 Mar 2011 01:25:50 +0000

Hi im trying to follow this tutorial also and i would like to know if im able to be my own CA perfoming the following here :http://www.davidpashley.com/articles/cert-authority.html

Is this possible?

I keep reciving the following error :

OpenSSL> req -nodes -config c:openssl-w64inopenssl.cnf -days 1825 -x509 -newkey rsa:10
24 -out c:openssl-win64inCApublic
oot.pem -outform PEM
error on line -1 of c:openssl-w64inopenssl.cnf
7932:error:02001003:system library:fopen:No such process:.cryptoioss_file.c:169:fopen
('c:openssl-w64inopenssl.cnf','rb')
7932:error:2006D080:BIO routines:BIO_new_file:no such file:.cryptoioss_file.c:172:
7932:error:0E078072:configuration file routines:DEF_LOAD:no such file:.cryptoconfconf_d
ef.c:197:
error in req

Dose anyone know what i am doing wrong?

By: Dharmavirsinh Jhala

Dharmavirsinh Jhala — Sun, 23 Jan 2011 05:35:16 +0000

Yes you are correct. We gotta submit CSR file to CSA (Certificate Signing Authority)

By: Steve Sorell

Steve Sorell — Sat, 22 Jan 2011 14:20:19 +0000

This help I have gotten it submitted and received my certificate. Thanks for your comments and help and for an excellent tutorial on where and how to set up the CSR

By: Steve Sorell

Steve Sorell — Sat, 22 Jan 2011 13:55:41 +0000

So if I am understanding you then it is the file that is submitted rather then pasting the information in.

By: Dharmavirsinh Jhala

Dharmavirsinh Jhala — Sat, 22 Jan 2011 09:06:12 +0000

Steve,

You can to submit this CSR file to Certificate Signing Authority like GoDaddy, VeriSign, thawte and many others, if you already have site hosted with some hosting company they can help you out getting SSL Certificate from CSR.

Let me know if this does not help.

By: Steve Sorell

Steve Sorell — Sat, 22 Jan 2011 05:18:28 +0000

I have used this tutorial to create my csr but I dont understand how I can get the csr submitted or what I need to do to submit is as in thawte and veri sign it has a cut and paste window so what do I need to put here or how do I submit it. also is their anyway I can open and read the csr.

By: Dharmavirsinh Jhala

Dharmavirsinh Jhala — Thu, 18 Nov 2010 19:08:36 +0000

Hi Ben, It's highly possible that your setup might not have that file around somehow. Now you should try downloading XAMPP from following URL and then give it a try. http://www.apachefriends.org/en/xampp-windows.htm... You can download sample openssl.cnf file from following location and give it a quick try. http://blogs.digitss.com/archives/openssl.cnf If it does not work just download xampp and follow step you should be through. Let me know if it does not help.

By: Ben Lake

Ben Lake — Thu, 18 Nov 2010 16:08:50 +0000

Very nice tutorial, probably the best ive seen.
I have a question that you may be able to help me with.

I have setup a certificate using openssl and i need to generate a new csr however openssl in returning the following:

Warning: Cannot open config file: d: estopenssl1098iopenssl.cnf

I know this is an error meaning the file cannot be found but i have no idea how to administer openssl and the openssl.cnf file does not seem to be located on the server anymore. Further more to root provided above does not exist as i only have a single C: drive, so im not sure where that root has appeared from. Any help would be greatly appreciated

Thanks Ben

By: Dharmavirsinh Jhala

Dharmavirsinh Jhala — Wed, 27 Oct 2010 04:18:12 +0000

Robert file will be under your apache/bin directory by default unless we specify different location.
In any command based operation if you don't specify it will refer to current location/directory only.