Questions tagged [csr]

In Public Key Infrastructure cryptography a CSR is a Certificate Signing Request

In Public Key Infrastructure cryptography a CSR is a Certificate Signing Request. A CSR is a request sent to a Certification Authority to receive a digital certificate based on the information contained within the CSR such as the identity of the web site or user applying for the certificate.

522 questions
3
votes
3 answers

Generating a CSR in Python

I'm trying to generate a CSR in Python without using OpenSSL. If someone could point in the right direction, I'd be very grateful.
Sean Nilan
  • 1,745
  • 1
  • 14
  • 21
3
votes
1 answer

Why do I have to create a certificate request (CSR) from the private key?

I am trying to create a Certificate Request (CSR) from the below method where I need to give the private key, my understanding is that CSR needs/contains only the public key information with the other details about the requestor like Company Name,…
Sandy
  • 41
  • 4
3
votes
1 answer

Reading email field from a certificate signing request (CSR) with C#

I'm using the following code to read the attributes of a CSR: string csr = myCSR; CX509CertificateRequestPkcs10 request = new CX509CertificateRequestPkcs10(); request.InitializeDecode(csr,…
Giox
  • 4,785
  • 8
  • 38
  • 81
3
votes
2 answers

PKCS10CertificationRequest creation on android

I'm very new to android and java both, so hopefully I'm missing something easy here. All I want to do is create a simple PKCS10 certificate signing request. I have some code that will compile and run on my ubuntu box (java-6-openjdk), but throws a…
Adam Mackler
  • 1,980
  • 1
  • 18
  • 32
3
votes
1 answer

Regenerate a .CSR file from .KEY and .PFX file?

I have a SHA-1 Code Signing Certificate issued from GoDaddy which expires soon. I've requested a renewal, and re-keyed it from my current machine using the auto-key -- everything works, except when I sign my .NET assemblies with it, they get a…
BrainSlugs83
  • 6,214
  • 7
  • 50
  • 56
3
votes
2 answers

When using keytool to generate a CSR file, does it have to be generated on the hosting server?

I was under the impression that I could run it on any machine, but a guy from our hosting company is saying that the csr has to be generated on the server hosting the site. Can anyone clear this one up for me? Thanks.
3
votes
1 answer

Facing error : Cannot create symbolic link

I m trying to install openSSL but its giving me error while extracting openssl-1.0.1g.tar: Error: D:\openssl-1.0.1g.tar_3: Cannot create symbolic link D:\openssl-1.0.1g\apps\md4.c A required privilege is not held by the client. ! Actually I…
New Co
  • 1,587
  • 3
  • 15
  • 18
3
votes
1 answer

Does the name of the csr and private key file should match the domain name?

I am confused about the name of file for private key and csr. I am using openssl to genearte private key, and then generate csr. Do the file names have to match the domain name? My domain is, say, tropy.com, so do I have to name csr file as…
John
  • 3,821
  • 2
  • 18
  • 25
3
votes
2 answers

How can I parse a Certificate Signing Request with Perl?

I want to use Perl to extract information from a Certificate Signing Request, preferably without launching an external openssl process. Since a CSR is stored in a base64-encoded ASN.1 format, I tried the Convert::PEM module. But it requires an ASN.1…
kixx
  • 3,245
  • 22
  • 19
3
votes
1 answer

Java Keytool stripping away SAN on CSR generation

Using the keytool included with JDK 7, I am creating a keystore including a certificate with a SAN extension. If decode the certificate, I see the SAN extension. If I then use keytool to export a CSR, the SAN information is missing from the…
HolySamosa
  • 9,011
  • 14
  • 69
  • 102
3
votes
0 answers

Is there linux tools to deal with Windows Client Certificate Enrollment Protocol?

I'm using Linux in corporate network with Active Directory (through samba). I generated CSR, using openssl and whant to enroll it with ActiveDirectory's autoenrollment. Is there any linux tools for it, or I need to deal with windows' nftive…
hoxnox
  • 355
  • 1
  • 4
  • 16
3
votes
1 answer

Creating .pem file programmatically in Objective-C?

I am trying to create a PEM file programmatically from a Certificate Signing Request using Objective-C and the OpenSSL library in an iPhone app. I have generated the CSR (of type X509_REQ *) by following Adria Navarro's answer to this…
chaingarden
  • 169
  • 1
  • 6
2
votes
3 answers

In PHP how do I get a CSR's public key?

I have a web page which takes a CSR (certificate signing request) and signs them. Problem is: I dont know how to extract the public key from the CSR. I tried openssl_csr_get_public_key($request) where request is the string holding the pem encoded…
chacham15
  • 13,719
  • 26
  • 104
  • 207
2
votes
0 answers

calculate new x509 subject hash for value for openssl

How to calculate 8 character hash of new openssl subject hash Old hash method is just take from first 4 binary character (8 char in hex form) of md5 subject hash and reverse it like: b373df0b7e7d063966ae886f3a88dbc5 =…
jdany
  • 21
  • 4
2
votes
0 answers

Getting blank array for Extension from x509 ParseCertificateRequest

I'm trying to get the challengePassword attribute from a CSR using Go. I've verified that the challengePassword attribute exists using openssl req -in test.csr -noout -text. Below is the code snippet I'm using to print an array containing all…
Patrick H.
  • 21
  • 1