Page History

...

Code Block

language	bash

su bhitch # Use a sudo enabled account.
cd ~
mkdir private
sudo chmod 700 ./private
cd private
openssl genrsa -out earth.com-_server.key 2048

The openssl command reads,

...

Panel

The private directory is not necessary but present for convention.

Code Block

language	bash

su bhitch # Use a sudo enabled account.
cd ~
mkdir private
sudo chmod 700 ./private
cd private
openssl genrsa -aes256 -out earth.com-_server.key 2048

The openssl command reads,

genrsa - generate asymmetric keys
aes266- - protect the RSA key with a passphrase using CBC AES 256 symmetric key encyrption
2048 - make the RSA private key 2048 bit

Info
As of May 2011, most of the examples including the Apache 2.2 documentation use des3 and 1024. This was to accommodate older browsers. The standard has since changed to AES-256-CBC 2048. Some CA will no longer accept 1024.

Because we do not want to enter a password every time the web server is restarted, remove the password from the key file,

Code Block

language	bash

openssl rsa -in earth.com-_server.key -out earth.com-_server.key.insecure

The next step is to generate the CSR.

...

Code Block

language	bash

openssl req -new -key earth.com-_server.key -out earth.com-_server.csr

You will be prompted to enter information about the certificate. The values should reflect your organization.

...

The text file should be saved with the domain name and the crt extension and is your public key signed by that CA. In this example, it will be earth.com-_server.crt.

Page tree

Versions Compared

Old Version 53

New Version 54

Key

Download CA Certificates

Download Intermediate Certificates