PKI

generatecsr.md

PKI

How to Generate Private Key

File parameters to be updated. fileName is file’s name keyPassword is the API Key password

export filename=mykey

Generate new PKI key pair, with 2048 key encryption

openssl genrsa -out ${filename}.key 2048

How to Generate CSR

export keyname=mykey
export fileName=mycsr
export commonName="www.example.com" 
export organizationUnit="MyOrg"
export organizationName="myDepartment" 
export localityName="Singapore"
export stateName="Singapore"
export subjectAlternataiveName1="www.example.com"
export subjectAlternataiveName2="api.example.com"

Generate Certificate Signing Request

openssl req -new \
-key ${keyname}.key \
-out ${fileName}.csr \
-sha256 -subj "/CN=${commonName}/OU=${organizationUnit}/O=${organizationName}/L=${localityName}/ST=${stateName}/C=SG" \
-reqexts SAN \
-config <(cat /etc/ssl/openssl.cnf \
        <(printf "\n[SAN]\nsubjectAltName=DNS:${subjectAlternataiveName1},DNS:${subjectAlternataiveName2}")) \