Apache Mod nns - Opret CSR

For at kunne sende en anmodning om et SSL certifikat skal der bruges en Certificate Signing Request (CSR). Denne CSR og privatnøglen kan genereres på webserveren.

Oprettelse af Certifikat Databasen

• Udfør følgende kommando for at oprette certifikat databasen: certutil -N -d /path/to/certificate/I dette tilfælde er /path/to/certificate/ placering hvor du ønsker at gemme certifikatet.Følgende svar vises:Enter a password which will be used to encrypt your keys.The password should be at least 8 characters long,and should contain at least one non-alphabetic character.Enter new password:Re-enter password:
• Indtast en adgangskoden to gange. Adgangskoden skal bestå af mindst 8 tegn og et nummer eller specialtegn.

Opret CSRen

1. CSRen kan nu oprettes med følgende kommando: certutil -R -s "CN=www.servercertificates.com, O=Xolphin, L=Copenhagen, C=DK" -o www_servercertificates_com.req -a -g 2048 -d /path/to/certificate/Svaret bør være:Enter Password or Pin for "NSS Certificate DB":
2. Her skal du indtaste den samme adgangskode som vi indtastes, hvor du oprettede databasen.Den følgende tekst skal vises:A random seed must be generated that will be used in the creation of your key. One of the easiest ways to create a random seed is to use the timing of keystrokes on a keyboard. To begin, type keys on the keyboard until this progress meter is full. DO NOT USE THE AUTOREPEAT FUNCTION ON YOUR KEYBOARD! Continue typing until the progress meter is full: |************************************************************| Finished. Press enter to continue: Generating key. This may take a few moments... Continue typing until the progress meter is full:
3. Now keep entering some random keys on the keyboard (don't keep them pressed) until the indicator is full, and hit enter.A file will be created that looks like:Certificate request generated by Netscape certutil Phone: (not specified) Common Name: www.servercertificates.com Email: (not specified) Organization: Xolphin Country: DK -----BEGIN NEW CERTIFICATE REQUEST----- FWc94gDObGwakZtdQvDJSrMU2gSWa1DLHDXsHSWHa/wUJRQ2KKU8Z1/lW03CrFcb I1VM8PnczqskfC3b7LZ9vn2w5Yydkt6t2zUU9g/rWRTgNawlgPwIHUqUsc3T23fs <<< meer regels code >>> hkiG9w0BAQUFAAOCAQEAUDQb8sKKgbMJTz0+FmiUnZW7AYciNwF50KT6vMJ7TB V/qrTMqErB+kluLFRYjWo+18pcrPfN3V5SPUUH4vuKJ8EH1staAccW2f/FSFZswr fsWjRGAG3pE0hWwob9aCYbT03n/E9CktfGhpZJ+rwerwec+= -----END NEW CERTIFICATE REQUEST-----

Lav et kopi af alt indholdet af den netop genererede CSR, inklusiv start- og slutlinjer og tag til anmodningssiden på vores hjemmeside for at bruge den til at sende en anmodning om et certifikat.