User Tools

Site Tools


linux:webserver:openssl:csr_erstellen

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
linux:webserver:openssl:csr_erstellen [2020/03/04 14:25] – created stonelinux:webserver:openssl:csr_erstellen [2021/06/22 12:38] (current) stone
Line 1: Line 1:
 ====== CSR erstellen ====== ====== CSR erstellen ======
-Standard 2019+===== Standard 2019 =====
  
 <code> <code>
 openssl req -nodes -new -keyout <file.key> -newkey rsa:4096 -sha256 -out <file.csr> openssl req -nodes -new -keyout <file.key> -newkey rsa:4096 -sha256 -out <file.csr>
 +</code>
 +\\
 +
 +===== Standard 2021 =====
 +**CSR Config File erstellen**
 +<code>
 +vim heisl.org_20210622.conf
 +
 +[req]
 +distinguished_name = req_distinguished_name
 +req_extensions = v3_req
 +prompt = no
 +[req_distinguished_name]
 +C = AT
 +ST = Vienna
 +L = Vienna
 +O = Heisl
 +OU = IT
 +CN = heisl.org
 +[v3_req]
 +keyUsage = keyEncipherment, dataEncipherment
 +extendedKeyUsage = serverAuth
 +subjectAltName = @alt_names
 +[alt_names]
 +DNS.1 = heisl.org
 +DNS.2 = www.heisl.org
 +</code>
 +\\
 +
 +** CSR Erstellen **
 +<code>
 +openssl req -new -sha256 -nodes -out heisl.org_20210622.csr -newkey rsa:4096 -keyout heisl.org_20210622.conf.key -config heisl.org_20210622.conf
 +</code>
 +\\
 +
 +** CSR Checken **
 +<code>
 +openssl req -text -noout -verify -in heisl.org_20210622.csr
 +
 +verify OK
 +Certificate Request:
 +...
 +...
 +X509v3 Subject Alternative Name:
 +DNS:heisl.org, DNS:www.heisl.org
 +...
 +...
 </code> </code>
linux/webserver/openssl/csr_erstellen.1583331955.txt.gz · Last modified: by stone