https://www.rodush.com/categories/security/Recent content in Security on Roman Dushko - Personal bloghttps://www.rodush.com/images/rodush-og.pnghttps://www.rodush.com/images/rodush-og.pngHugoenWed, 17 Aug 2011 14:23:26 +0000https://www.rodush.com/posts/2011-08-17-how-to-generate-csr-file/Wed, 17 Aug 2011 14:23:26 +0000https://www.rodush.com/posts/2011-08-17-how-to-generate-csr-file/<p>You can generate CSR using OpenSSL:</p> <div class="highlight"><pre tabindex="0" style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-sh" data-lang="sh"><span style="display:flex;"><span>openssl req -newkey rsa:2048 -keyout private_key.pem -out server.csr </span></span></code></pre></div><p>where <code>req</code> is a command to control x.509 certificates,</p> <p><code>-newkey</code> — means <em>&ldquo;we need a new key&rdquo;</em></p> <p><code>_rsa_</code> — hashing algorythm, and <em>2048</em> — the length of a key. To sign certificates after 2010 you need at least this length! Until 2010 it was possible to use <em>1024</em> bit key.</p> <p><code>-keyout</code> — path to the file on the server</p>