|
Follow these instructions to generate a CSR for your Web site.
After completing this process, you will have a CSR ready to submit to
ipsCA
in order to be generated into a SSL Security Certificate.
If you are not using JDK 1.4 or higher, you must download and
install "Java Secure Socket Extensions" JSSE.
1. Generate a private key with the following command:
$JAVA_HOME/bin/keytool
-genkey -alias ipsca.keystore -keyalg RSA -keystore /path/to/domainname.kdb
In the next field you
will be asked "What is your first and last name?" At this prompt, you
must specify the common name (FQDN) of your web site.
You will then be prompted
for your organizational unit, organization, etc.
2. Generate the
Certificate Signing Request (CSR)
$JAVA_HOME/bin/keytool
-certreq -alias ipsca.keystore -keystore /path/to/keystore.kdb -file filename.csr
You will not be prompted
for the common name, organization, etc. The keytool will use the values that you
specify when generating the private key.
3. Now go to
ipsCA
, select your certificate and fill the form with your personal data, paste your certificate request in the CSR field
making sure that you include -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST-----.
4. Make a backup of the keystore.kdb key database. It would be useful for you if your server crashes.
|
