Stack Overflow
Stack Overflow

Questions tagged [csr]

In Public Key Infrastructure cryptography a CSR is a Certificate Signing Request

In Public Key Infrastructure cryptography a CSR is a Certificate Signing Request. A CSR is a request sent to a Certification Authority to receive a digital certificate based on the information contained within the CSR such as the identity of the web site or user applying for the certificate.

522 questions
271
votes
4 answers

How do you sign a Certificate Signing Request with your Certification Authority?

During my search, I found several ways of signing a SSL Certificate Signing Request: Using the x509 module: openssl x509 -req -days 360 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt Using the ca module: openssl ca -cert…
Bernard Rosset
  • 4,523
  • 6
  • 27
  • 29
108
votes
8 answers

What RSA key length should I use for my SSL certificates?

I'm in the process of creating a CSR, and I wonder which is arguably the best length for my RSA key. Of course, 384 is probably too weak, and 16384 is probably too slow. Is there a consensus on the key length one should use, depending on the…
Brann
  • 31,689
  • 32
  • 113
  • 162
43
votes
2 answers

Creating an x509 v3 user certificate by signing CSR

I know how to sign a CSR using openssl, but the result certificate is an x509 v1, and not v3. I'm using the following commands: x509 -req -days 365 -in myCSR.csr -CA myCA.crt -CAkey myCA.key -CAcreateserial -out userCertificate.crt I've searched…
Hex-Omega
  • 493
  • 1
  • 4
  • 7
42
votes
4 answers

How to decode a CSR File?

I ran accross a CSR file (Certificate Signing Request) and I need to extract some information from it. There's a way to decode it using .NET Framework?
Romias
  • 13,783
  • 7
  • 56
  • 85
39
votes
9 answers

iPhone Developer Portal won't accept my CSR

I am using the Development Provisioning Assistant in the iPhone Developer Portal, but when I get to the part where it asks me to generate and upload my CSR, I try to upload it and it just gives me this error: The CSR selected is invalid. Please…
Eamon Ford
32
votes
1 answer

How to convert .csr to .cer (or whatever usable on Windows)

I'm trying to figure out how to install .csr certificate under Windows but probably the only way is to convert it to some other format (maybe with openssl) but I have no idea how. Do you have any suggestion?
martin
  • 93,354
  • 25
  • 191
  • 226
32
votes
5 answers

How to create a csr file for azure web app

I need to create a csr file to give it to someone. The csr file is for a SSL certificate for a azure web app. When I google I find inconsistent information about where to generate the csr file. Some sources say: I have to create the csr file on the…
HelloWorld
  • 4,671
  • 12
  • 46
  • 78
30
votes
1 answer

Passing CSR distinguished-name fields as parameters to OpenSSL

How can you generate a CSR without requiring user input, such as to generate CSRs from within an application?
Dustin Oprea
  • 9,673
  • 13
  • 65
  • 105
27
votes
2 answers

Difference between keytool -genkey vs -genkeypair

I am using keytool to create a CSR. I wonder what is the difference between the options -genkey and -genkeypair. My understanding is that -genkey creates only private key and -genkeypair creates both private and public key. If so, how do I get the…
Thiru
  • 381
  • 1
  • 3
  • 6
23
votes
1 answer

Can we use same CSR to create certificates for different companies?

I have a quick question. I develop iOS apps for multiple clients. Each client has their own Apple accounts and I create certificates for them from my machine. My question here is can I use the same CSR file to create certificates for different…
EmptyStack
  • 51,274
  • 23
  • 147
  • 178
22
votes
5 answers

Hostname / IP doesn't match certificate's altname

I am trying to create a TLS server / client setup using Node.js 0.8.8 with a self-signed certificate. The essential server code looks like var tlsServer = tls.createServer({ key: fs.readFileSync('server-key.pem'), cert:…
Golo Roden
  • 140,679
  • 96
  • 298
  • 425
21
votes
2 answers

Invalid CSR, Invalid Certificate error for generating Apple Distribution Certificate

I have been generating Distribution certificates on Apple developer portal from the last 4 years but this time I am facing an error while uploading .certSigningRequest file. I have created it like the way I always created i.e. Keychain Access ->…
ihammys
  • 812
  • 7
  • 15
21
votes
3 answers

Create a Certificate Signing Request (CSR) with an email address in Go

I tried to generate a CSR using "crypto/x509" package and didn't find the way to add a "emailAddress" field into its Subject. According to the documentation CertificateRequest structure has a "EmailAddresses []string" field but it's serialized into…
mephist
  • 363
  • 1
  • 3
  • 9
19
votes
5 answers

BouncyCastle RSAPrivateKey to .NET RSAPrivateKey

I'm creating a certificate distribution system to keep track of clients and stuff. What happens is: Client send CSR to Server Server checks and signs certificate Server sends Signed certificate to Client Client puts Signed certificate plus Private…
albertjan
  • 7,739
  • 6
  • 44
  • 74
19
votes
3 answers

making CSR certificates in Windows (7)

Closely related to How to generate CSR when IIS is not installed. I also do not have this installed. I am developing a mobile application for iOS, and i am trying to obtain a provisioning file so i can test my app locally. In the process of…
jlehenbauer
  • 599
  • 2
  • 11
  • 33
1
2 3
…
34 35