If you want to convert your website from HTTP to HTTPS, you need to get a SSL certificate from a valid organization like Verisign or Thawte. You can also generate self signed SSL certificate for testing purpose.
In this article, let us review how to generate private key file (server.key), certificate signing request file (server.csr) and webserver certificate file (server.crt) that can be used on Apache server with mod_ssl.
To make the CSR from the keystore, run the command prompt below:keytool -certreq -alias server -file csr.csr -keystore keystore.jks Enter keystore password: Note: The keystore password is the same password you created in step 2. The above command will create the CSR and private key and saves as a.csr file and a.jks file. Generate the order. Above command will create a key file tecadmin.net.key, which is used in step 3. Step 3: Generate CSR for your Domain using Key. After generating a key, next steps are to generate CSR for the domain. Use below command to generate CSR file, This command will prompt for your organization and common name, locality, email, and country. See Example: SSL Certificate - Generate a Key and CSR. Tableau Server uses Apache, which includes OpenSSL. You can use the OpenSSL toolkit to generate a key file and Certificate Signing Request (CSR) which can then be used to obtain a signed SSL certificate. Steps to generate a key and CSR.
I typically like to name the files with the domain name of the HTTPS URL that will be using this certificate. This makes it easier to identify and maintain.
First, generate a private key on the Linux server that runs Apache webserver using openssl command as shown below.
The generated private key looks like the following.
Using the key generate above, you should generate a certificate request file (csr) using openssl as shown below.
For testing purpose, you can generate a self-signed SSL certificate that is valid for 1 year using openssl command as shown below.
You can use this method to generate Apache SSL Key, CSR and CRT file in most of the Linux, Unix systems including Ubuntu, Debian, CentOS, Fedora and Red Hat.
Instead of signing it youself, you can also generate a valid trial SSL certificate from thawte. i.e Before spending the money on purchasing a certificate, you can also get a valid fully functional 21 day trial SSL certificates from Thawte. Once this valid certificate works, you can either decide to purchase it from Thawte or any other SSL signing organization.
This step is optional and not really required. For testing purpose, you can always use the self-signed certificate that was generated from the above step.
Go to Thwate trial certificate request page and do the following:
Copy/Paste the trial certificate to the www.thegeekstuff.com.crt file as shown below.
Next post: Google Chrome OS – Beginning of End of Microsoft?
Previous post: Blog Makeover: New Thesis Theme In Action
A CSR is encoded text that contains information about the certificate requester. This information includes, but is not limited to, the publisher name for the certificate (referred to as a “Common Name”), organization name (if applicable), and a contact email for the certificate. When creating a CSR it will export two files, these two files will be your CSR, which will be requested during enrollment, and a corresponding private key which should not be shared and will be required during installation.
Note: Before proceeding with the instructions below, confirm the Java Development Kit (JDK) is installed correctly on your server or local computer.
The following instructions will guide you through creating a Java Keystore File and CSR. If you already generated the CSR and received your trusted Code Signing Certificate, please click here for Code Signing downloading/exporting Instructions.
To make a keystore and key file, run the command prompt below:
keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore keystore.jks
The above command will create a Java keystore file called keystore.jks
To make the CSR from the keystore, run the command prompt below:keytool -certreq -alias server -file csr.csr -keystore keystore.jks
Enter keystore password:
Note: The keystore password is the same password you created in step 2.
The above command will create the CSR and private key and saves as a .csr file and a .jks file.
After you complete the validation process and receive the trusted Code Signing Certificate from the issuing Certificate Authority, please click here and proceed to the next step of using our Code Signing Installation Instructions.