openssl req

• openssl req -config root-ca.cnf -key /your_path/private/root-ca_key.pem -new -x509 -days 3650 -sha256 -extensions v3_ca -out /your_path/private/root-ca_cert.pem

Generate a CSR

• openssl req -new -key example.org.key -out example.org.csr

Errors:

openssl req -new -key example.org.key -out example.org.csr
Can't open example.org.key for reading, No such file or directory.

Solution: generate a key. openssl genrsa -aes256 -out ./example.org.key 4096

openssl req -new -key example.org.key -out example.org.csr
unable to load Private Key

Related terms

• openssl genrsa

See also

• openssl [ rand | s_client | passwd | openssl req | openssl rsa | openssl genrsa | openssl x509 | openssl ca | openssl verify | openssl ec | openssl dgst | openssl pkcs12 | openssl asn1parse | openssl help | .cer to .pem, openssl version
• Certificate, CSR (PKCS10), /etc/letsencrypt/csr/, openssl req, X.509, [.pem, .cer, .csr], Kubernetes CertificateSigningRequest

https://gist.github.com/Soarez/9688998