7 replies to this topic

[Pompeylad]

Hi,

I am about to buy a ssl from www.trustssl.co.uk but they have asked me for a CSR. How do I produce one from my sever? I tought that thats what they were going to supply me with!!!

Thanks,
Pompeylad

[OceanRanch]

You're correct, they should be sending you the CSR.

From their site at

http://www.trustssl.co.uk/install_OpenSSL.html


Step one: Copy your certificate to file

You will receive an email from Comodo with the certificate in the email (yourdomainname.crt). When viewed in a text editor, your certificate will look something like:

-----BEGIN CERTIFICATE-----
MIAGCSqGSIb3DQEHAqCAMIACAQExADALBgkqhkiG9w0BBwGggDCCAmowggHXAhAF
UbM77e50M63v1Z2A/5O5MA0GCSqGSIb3DQEOBAUAMF8xCzAJBgNVBAYTAlVTMSAw
(.......)
E+cFEpf0WForA+eRP6XraWw8rTN8102zGrcJgg4P6XVS4l39+l5aCEGGbauLP5W6
K99c42ku3QrlX2+KeDi+xBG2cEIsdSiXeQS/16S36ITclu4AADEAAAAAAAAA
-----END CERTIFICATE-----


Call or email their support folks and have them send you the CSR then follow the instructions on their site for you server type.

HTH
Tom

Edited by OceanRanch, 07 February 2004, 21:44.

[ecartz]

No, as the text cited states, they send you a CRT (signed public key) and a private key (for decryption). You send them the CSR (Certificate Signing Request) to make the CRT. You should be able to get your host to create the CSR for you. If you run your own server, you can google for instructions with the keywords: ssl certificate csr. For me, the first link had instructions. I would post the URL, but it was a commercial site.

Hth,
Matt

[OceanRanch]

Thanks Matt for helping out here. (Forest thru the trees kind of thing).

Tom

[Pompeylad]

Opps sorry for posting a commercial URL, so here you go folks find a OS SSL at http://www.openssl.org/. Thats for all you OS junkies out there in OS land.

Pompeylad.

[ecartz]

The equivalent link on that site would be http://www.openssl.org/docs/HOWTO/certificates.txt

You can skip the parts about self-signing, as that is the part about which the SSL vendor needs to be concerned.

Hth,
Matt

[Pompeylad]

Matt,

Would you (or anybody else for that matter) recommend http://www.openssl.org/?

I am just saying this as OSC is no walk in the park, so should we go the whole hog and embrace OS with all our hearts?

Anybody got any good/bad points about Linux?

Pompeylad.

[Pompeylad]

Er......anybody?