Stack Overflow
Stack Overflow

Questions tagged [csr]

In Public Key Infrastructure cryptography a CSR is a Certificate Signing Request

In Public Key Infrastructure cryptography a CSR is a Certificate Signing Request. A CSR is a request sent to a Certification Authority to receive a digital certificate based on the information contained within the CSR such as the identity of the web site or user applying for the certificate.

522 questions
8
votes
5 answers

Error while creating a CSR

During the creation of self-signed certificate using OpenSSL command line tool, i'm encountered with an error First I created a private key openssl genrsa -out MyKey1.key 2048 While creating a CSR i'm getting an error openssl req -new -out…
g90uagk
  • 420
  • 2
  • 5
  • 16
8
votes
2 answers

What is the certificate enrollment process?

I am looking for a procedure of enrolling a certificate. I have searched a lot but didn't find a good answer. Till now I get that firstly I have to generate a Key store (For creating a public key and a private key) then private key should be kept…
Dante
  • 221
  • 1
  • 3
  • 14
8
votes
2 answers

Is there a spec for CSR 'BEGIN' headers?

I've noticed a subtle difference in how OpenSSL and certreq generated PKCS10 CSRs: OpenSSL: -----BEGIN CERTIFICATE REQUEST----- Microsoft certreq: -----BEGIN NEW CERTIFICATE REQUEST----- (and a footer with the same, except for END) The…
mikemaccana
  • 110,530
  • 99
  • 389
  • 494
7
votes
1 answer

Generating Certificate Signing Request using Management Console

I am following https://godaddy.com/help/windows-generate-csr-for-code-or-driver-signing-certificate-7282 guide to generate a CSR to request a code signing/software publishing certificate. In management console when I Right-click Certificates, and…
mhsarosh
  • 308
  • 1
  • 7
7
votes
2 answers

How do you convert a .CSR / p10 / PKCS#10 file to .DER format in java?

How do you convert a .CSR (a.k.a. p10 or PKCS#10) file to .DER format in java? Here is a sample one: -----BEGIN CERTIFICATE…
atom88
  • 1,449
  • 3
  • 22
  • 32
6
votes
1 answer

PHP openssl_x509_parse doesn't return data for CSR

I used the following command to generate a CSR: openssl req -nodes -newkey rsa:2048 -keyout mytestserver.key -out mytestserver.csr I tried to decode the mytestserver.csr with the following PHP code:
mnnmountain
  • 143
  • 1
  • 9
6
votes
4 answers

Submitting Base64 CSR to a Microsoft CA (via cURL)

I have written a bash script to automate IIS7 Certificate generation as per this ServerFault link. I would like to automate sending the Code Signing Request (CSR) to an internal Microsoft Certification Authority (MS CA) via cURL, the following code…
Florian Bidabé
  • 640
  • 8
  • 22
6
votes
2 answers

Sign certificate in PKCS#11

To sign certificate in OpenSSL I use X509_sign() function by feeding it with a request (as X509_REQ*), a signing key and a digest. Now I have my signing key stored in HSM, so I can't extract it to sign the certificate. Unfortunately PKCS#11 does…
Vitaly P
  • 1,121
  • 3
  • 11
  • 21
6
votes
4 answers

Keytool keeps giving SHA256 sigalg instead of requested alg

I am using Keytool in java to generate a keystore/CSR to submit to a certificate Authority. My CA only supports MD5withRSA and SHA1withRSA Everytime I use keytool to create the keystore and export the CSR I am getting a SHA256withRSA signature…
Moylin
  • 737
  • 1
  • 9
  • 20
6
votes
2 answers

Java - sign certificate programmatically without BC

I am struggling with code that allows me to generate and sign certificates from java code without using keytool. Additionally due to dependency problems and incompatibilities i am unable to use bouncycastle libraries. So far I found working code to…
Pma
  • 1,063
  • 1
  • 16
  • 30
5
votes
1 answer

Setting up httpS for multiple domain

I need to setup https for multiple domians xxxx.com xxxx.net (with single common certificate) CA where we buying certificate ask to create Certificate Signing Request (CSR), but when I'm generating it with openssl - it asks only for one name how…
Djangonaut
  • 5,511
  • 7
  • 40
  • 53
5
votes
2 answers

How do you generate a CSR in Java without signing it by the requester?

Basically, I need to isolate the data of the constructed CSR (Certificate Signing Request) prior to it being first signed by the entity making the request, preferably in Java. Many thanks in advance! It would also be useful to note how to…
penguin4hire
  • 288
  • 1
  • 2
  • 14
5
votes
1 answer

How to get a CSR for Github Pages website

I have currently connected GitHub pages with a domain name from namecheap.com. I recently bought an SSL certificate from NameCheap as well. How do I get a CSR from GitHub to configure the SSL certificate?
Mushad Aadil
  • 51
  • 2
5
votes
5 answers

Approved Kubernetes CSR, but certificate not shown in status

So I've gone through the process of generating an RSA key, creating the YAML for a CSR, using kubectl to create a CSR in Minikube, approved the certificate. However, when I try to download the certificate using kubectl get csr my-csr -o…
Alex
  • 1,293
  • 1
  • 13
  • 26
5
votes
2 answers

Getting Subject Alternate Names with Pkcs10CertificationRequest

I'm currently able to decode a CSR's values except for Requested Extensions, specifically X509v3 Subject Alternative Name. Here's the relevant part of my `DecodeCSR(string csr): public void DecodeCsr(string csrStr){ //getting just csr var csrChars…
Austin Mauldin
  • 315
  • 1
  • 6
  • 17
1 2
3
…
34 35