售前咨询
技术支持
渠道合作

Nginx CSR生成

Openssl制作CSR文件

1、Openssl是一个命令行工具,可以到 www.openssl.org 下载。windows版的去: http://slproweb.com/products/Win32OpenSSL.html下载,安装OpenSSL到C:\OpenSSL

2、输入命令:

openssl req -new -nodes -newkey rsa:2048 -keyout server.key -out server.csr

Loading 'screen' into random state - done

Generating a 2048 bit RSA private key

...........................++++++

....................................++++++

writing new private key to 'server.key'

-----

You are about to be asked to enter information that will be

incorporated into your certificate request.

What you are about to enter is what is called a

Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [AU]:CN

State or Province Name (full name) [Some-State]: Guangdong

Locality Name (eg, city) []:Guangzhou

Organization Name (eg, company) [Internet Widgits Ltd]:

Global Digital Cybersecurity Authority Co., Ltd.

Organizational Unit Name (eg, section) []:Technical support

Common Name (eg, YOUR name) []:www.trustauth.cn

Email Address []:

 

Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:

An optional company name []:

3、在完成了如上的交互信息输入后,当前目录下将产生两个文件:server.key 和 server.csr。请妥善保存这两个文件,请不要泄露server.key私钥文件。

4、在这一命令执行的过程中,系统会要求您填写如下信息:

Openssl制作中文CSR文件

1、首先需要修改Openssl.cnf,添加一条命令:

string_mask = utf8only

2、在Openssl.cnf中修改缺省的DN信息,录入需要的中文字符:

commonName_default = www.trustauth.cn

organizationName_default =数安时代科技股份有限公司

organizationalUnitName_default = 技术支持部

stateOrProvinceName_default = 广东省

localityName_default = 广州市

countryName_default = CN

3、将文件按UTF-8,no bom的编码格式保存,可以用Ultraedit这类工具进行保存。

4、在准备好Openssl.cnf文件后,输入命令:

openssl req -utf8 -config config.cnf -newkey rsa:2048 -nodes -batch -keyout server.key -out server.csr

5、在完成了如上的交互信息输入后,当前目录下将产生两个文件:server.key 和 server.csr。请妥善保存这两个文件,请不要泄露server.key私钥文件。

上一篇:

下一篇:

相关新闻