Comments on: How to generate Certificate Signing Request (CSR) file with Apache OpenSSL

By: Generating 2048-bit CSR with OpenSSL | BLOGS@DiGiTSS

Generating 2048-bit CSR with OpenSSL | BLOGS@DiGiTSS — Sun, 06 Dec 2009 13:37:40 +0000

[...] or either on Linux platforms. But if you really want to have pass-phrase then please refer to a previous post and replace it with 2048 or 4096 instead of 1024 which is being used in commands or just remove the [...]

By: Brian Jester

Brian Jester — Tue, 20 Oct 2009 20:42:52 +0000

Thank you for the info on the unsecured version of the server key file on Windows Apache.

By: Newbie

Newbie — Tue, 20 Oct 2009 16:01:46 +0000

When i run the given below command i get an error
req -new -key digitss.key -out digitss.csr -config openssl.cnf

The error that i got is

“unable to load Private Key
3720:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:.\crypto\evp\evp_enc.c:461:
3720:error:0906A065:PEM routines:PEM_do_header:bad decrypt:.\crypto\pem\pem_lib.c:425:
error in req”

By: birco

birco — Thu, 07 May 2009 04:57:59 +0000

Nevermind, my mistake… that’ll teach me to skim over the instructions, I missed the part where it said to make a copy of openssl.cnf into the bin dir

By: birco

birco — Thu, 07 May 2009 04:51:25 +0000

Hey, i’m having trouble using this command:

req -new -key digitss.key -out digitss.csr -config openssl.cnf

When i do I get the following error:

error on line -1 of openssl.cnf
3900:error:02001002:system library:fopen:no such file or directory:.\crypto\bio\bss_file.c:122:fopen(‘openssl.cnf’,'rb’)
3900:error:2006d080:BIO routines:BIO_new_file:no such file:.\crypto\bio\bss_file.c:125:
3900:error:0e078072:configuration file routines:DEF_LOAD:no such file:.\crypto\conf\conf_def.c:197:
error in req

Any help would be greatly appreciated

Birco

By: Ex Girlfiend

Ex Girlfiend — Thu, 09 Apr 2009 08:55:01 +0000

This is quite a up-to-date information. I think I’ll share it on Facebook.

By: Dharmavirsinh Jhala

Dharmavirsinh Jhala — Tue, 17 Feb 2009 16:07:48 +0000

Hi Sandeep,
Then it will be called self signed test certificate.
But as far as I know you need SSL for HTTPS:// and default port is 443.
If you are using XAMPP then it comes with self-signed sample Certificates.
You can find “makecert.bat” file under [X]:\xampp\apache\ directory which can generate Certificate for you with your own domain.key and domain.csr files.

But in short the answer is YES you can have self-signed SSL certificates for your LOCALHOST.

Let me know if there are any questions, where I can help.

Ref URL:
http://www.apachefriends.org/en/xampp.html

By: sandeep

sandeep — Mon, 16 Feb 2009 05:49:55 +0000

Hi,

What if i am not having any domain name or Common Name (eg, YOUR name), but still i want to generate CSR for my http://localhost:8080 and test it locally. How can I do this?

thanks
Sandeep

By: Madhav vyas

Madhav vyas — Mon, 11 Aug 2008 12:15:49 +0000

Great,
Really very useful to developer…

Thanks
Dharmavir