Page History

...

The next step is to generate the CSR.

Panel

If a password is used, a password will need to be entered whenever the service using the certificate is started.

Code Block
cd ~ mkdir private sudo chmod 700 ./private cd private openssl genrsa -aes256 -out server.key 2048

The command reads,

genrsa - generate asymmetric keys
aes266- - protect the RSA key with a passphrase using CBC AES 256 symmetric key encyrption
2048 - make the RSA private key 2048 bit

Info
As of May 2011, most of the examples including the Apache 2.2 documentation use des3 and 1024. This was to accommodate older browsers. The standard has since changed to AES-256-CBC 2048. Some CA will no longer accept 1024.

Because we do not want to enter a password every time the web server is restarted, remove the password from the key file,

Code Block

language	bash

openssl rsa -in server.key -out server.key.insecure

The next step is to generate the CSR.

Generate the CSR which will be submitted to the CA,

...

Versions Compared