How can we help?

How to generate Certificate Signing Request (CSR)?

Follow

 

NOTICE: This instruction applies for software version < 4.30. If you use software 4.30 or higher, you may generate CSR in webGUI > menu Settings > SSL

 

To generate CSR, please do the following:

1) Connect with SSH (as root) to your SMSEagle

2) Run the following command:

openssl req -new -newkey rsa:2048 -nodes -keyout /tmp/server.key  -out /tmp/server.csr

and follow on-screen commands. This command will prompt for your organization and common name, locality, email, and country. Common Name must be the same as your domain name:

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]: PL
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:yourdomain.com
Email Address []:admin@yourdomain.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

When asked to set a password - do not set any here (just press Enter).

The above command will generate two files:

server.key
server.crt

in the /tmp directory.

Now connect with SFTP client (using the same root credentials) and download both files to your PC.

Use server.crt file to order your SSL from desired CA (Certificate Authority).

After you've got your new SSL certificate, you'll need to use server.key file to be uploaded along with certificate file through Settings -> SSL menu in your SMSEagle webUI.

 

 

Was this article helpful?
0 out of 0 found this helpful