CSR Support

Roxen

Roxen Challenger Key and CSR Generation

Note: Roxen Challenger web server use the free SSLeay library for secure web browsing

1. You have to install SSLeay, version 0.6.4 or later, and make sure that the ssleay program is in your PATH. It is usually installed in /usr/local/ssl/bin

2. It is recommended that you first find some large relatively random files. If you are lucky, your system has a random device, and you can create such a file (named randomness) with dd if=/dev/random of=randomness bs=500 count=1.

3. Then type ssleay genrsa -rand randomness 1024 >my_key.rsa. This generates your private key

Note: We do not protect it with a password

4. The next step is to create a Certificate Signing Request (CSR). Type ssleay req -new -key my_key.rsa >my_csr.csr and fill in the information.  

Distinguished Name Field

Explanation

Example

Common Name (Server Host Name)

The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com

Organization Name

The exact legal name of your organization. Do not abbreviate

IPS S.L.

Organizational Unit

Optional for additional organization information

Marketing

City or Locality

The city where your organization is located.

Atlanta

State or Province Name

The state or province where your organization is located. Can not be abbreviated.

Georgia

Country Name

The two-letter ISO abbreviation for your country

US = United States

5. Send my_csr.csr to the certificate authority of your choice, for example IPSCA,  and keep your secret key my_key.rsa some place safe and secret.