Difference between revisions of "Certificate Signing Request (CSR)"
Jump to navigation
Jump to search
↑ https://gist.github.com/Soarez/9688998
| (15 intermediate revisions by 3 users not shown) | |||
| Line 4: | Line 4: | ||
* <code>[[openssl req]] -text -noout -in root.csr</code> | * <code>[[openssl req]] -text -noout -in root.csr</code> | ||
| − | Create a CSR with subject <code>CN=<common name>,O=<realm></code>, for example: | + | Create a CSR with [[subject]] <code>CN=<common name>,O=<realm></code>, for example: |
* <code>[[certutil]] -R -d <database path> -a -g <key size> -s 'CN=<common name>,O=DOMAIN.COM'</code> | * <code>[[certutil]] -R -d <database path> -a -g <key size> -s 'CN=<common name>,O=DOMAIN.COM'</code> | ||
Generate a [[CSR]] | Generate a [[CSR]] | ||
| − | * <code>[[openssl req | + | * <code>[[openssl req -new -key example.org.key -out example.org.csr]]</code><ref>https://gist.github.com/Soarez/9688998</ref> |
| + | |||
| + | |||
| + | [[file]] example.org.csr | ||
| + | example.org.csr: PEM certificate request | ||
== Related terms == | == Related terms == | ||
| − | * [[Kubernetes]] CertificateSigningRequest ([[CSR]]) API, since [[v1.18]] | + | * [[Kubernetes]] [[CertificateSigningRequest]] ([[CSR]]) API, since [[v1.18]] |
* <code>[[openssl ca -config]]</code> | * <code>[[openssl ca -config]]</code> | ||
* <code>[[/etc/letsencrypt/csr/]]</code> | * <code>[[/etc/letsencrypt/csr/]]</code> | ||
* [[macOS]] [[Keychain Access app]] | * [[macOS]] [[Keychain Access app]] | ||
| + | * [[PKCS10]] | ||
| + | * [[X.509]] | ||
| + | * [[Create a new X.509 certificate]] | ||
| + | * <code>[[kubectl describe csr]]</code> | ||
| + | |||
| + | == Activities == | ||
| + | |||
| + | |||
| + | [[Keychain Access app]] activities | ||
| + | * [[Create a certificate]] | ||
| + | * [[Create a certificate authority]] ([[CA]]) | ||
| + | * [[Create a certificate for someone else as a Certificate Authority]] | ||
| + | * [[Request a certificate from a Certificate Authority]] | ||
| + | * [[Set the default Certificate Authority]] | ||
| + | * [[Evaluate a Certificate]] | ||
== See also == | == See also == | ||
* {{CSR}} | * {{CSR}} | ||
| − | * {{openssl}} | + | * {{openssl req}} |
* {{certificates}} | * {{certificates}} | ||
| + | * {{PKI}} | ||
[[Category:Web]] | [[Category:Web]] | ||
[[Category:Security]] | [[Category:Security]] | ||
Latest revision as of 12:37, 28 June 2024
wikipedia:Certificate Signing Request (CSR)
Read CSR
openssl req -text -noout -in root.csr
Create a CSR with subject CN=<common name>,O=<realm>, for example:
certutil -R -d <database path> -a -g <key size> -s 'CN=<common name>,O=DOMAIN.COM'
Generate a CSR
file example.org.csr example.org.csr: PEM certificate request
Related terms[edit]
- Kubernetes CertificateSigningRequest (CSR) API, since v1.18
openssl ca -config/etc/letsencrypt/csr/- macOS Keychain Access app
- PKCS10
- X.509
- Create a new X.509 certificate
kubectl describe csr
Activities[edit]
Keychain Access app activities
- Create a certificate
- Create a certificate authority (CA)
- Create a certificate for someone else as a Certificate Authority
- Request a certificate from a Certificate Authority
- Set the default Certificate Authority
- Evaluate a Certificate
See also[edit]
- Certificate, CSR (PKCS10),
/etc/letsencrypt/csr/,openssl req, X.509, [.pem,.cer,.csr], Kubernetes CertificateSigningRequest - CSR:
openssl req [ -x509 ] - Certificate, certificate extensions (
.pem,.pfx), CSR,.csr, root certificate, public certificate - PKI, OpenCA, openSSL, Certificate Transparency (CT), DogTag, FreeIPA, Key management, KMIP, CSR,
/etc/pki/
Advertising:
