Willrey维瑞 发表于 2011-12-21 08:43

SSL证书请求文件(CSR)生成指南 - Apache SSL

<DIV>
<TABLE cellSpacing=0 cellPadding=10 width="100%">
<TBODY>
<TR>
<TD bgColor=#e9e9e9 vAlign=top><SPAN class=STYLE2><STRONG>制作CSR申请文件</STRONG></SPAN></TD></TR>
<TR>
<TD vAlign=top>在生成CSR文件时同时生成您的私钥文件，如果您丢了私钥或忘了私钥密码，证书不能安装成功！您必须重新生成私钥和CSR文件，免费重新颁发新的证书。为了避免此情况的发生，请在生成CSR后一定要备份私钥文件和记住私钥密码，最好是在收到证书之前不要还原或者重装服务器。 <BR><BR>"openssl"用于生成私钥和CSR，OpenSSL一般安装在/user/bin下，如果您的系统安装在其他目录，请指定正确的目录路径。<BR><BR><SPAN lang=EN-US xml:lang="EN-US"><STRONG>openssl req -new -nodes -newkey rsa:2048 -keyout domain.key -out domain.csr</STRONG></SPAN><STRONG><BR><BR></STRONG>以上命令将会在当前目录下生成domain.key（私钥文件）和domain.csr（CSR，证书签名请求文件）两个文件，用户可以指定所生成的文件名和所在的路径，接下来提示用户继续输入申请证书的详细信息：<BR>
<TABLE border=0 cellSpacing=0 cellPadding=0 width=545>
<TBODY>
<TR>
<TD bgColor=#000000 width=10>&nbsp;</TD>
<TD bgColor=#000000 width=535>
<DIV class=STYLE1><FONT color=#ffffff>Loading 'screen' into random state - done</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>Generating a 2048 bit RSA private key</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>.........................................+++</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>........................................+++</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>writing new private key to 'domain.key'</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>----------------------------------</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>You are about to be asked to enter information that will be incorporated</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>into your certificate request.</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>What you are about to enter is what is called a Distinguished Name or a DN.</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>There are quite a few fields but you can leave some blank</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>For some fields there will be a default value,</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>If you enter '.', the field will be left blank.</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>-------------------------------</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>Country Name (2 letter code) :CN</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>State or Province Name (full name) :Guangdong</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>Locality Name (eg, city) []:Shenzhen</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>Organization Name (eg, company) : Shenzhen Willrey eCommerce Limited </FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>Organizational Unit Name (eg, section) []:IT Dept.</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>Common Name (eg, YOUR name) []:www.willrey.com</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>Email Address []:</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff></FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>Please enter the following 'extra' attributes</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>to be sent with your certificate request</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>A challenge password []:</FONT></DIV>
<DIV class=STYLE1><FONT color=#ffffff>An optional company name []:</FONT></DIV></TD></TR></TBODY></TABLE><BR><BR>
<DIV>从Email地址开始，下面的信息都不需要，请保留为空，直接回车即可。需要输入的信息说明请见下表：<BR></DIV>
<TABLE cellSpacing=0 cellPadding=0>
<TBODY>
<TR>
<TD height=20 width=189>
<DIV align=center><STRONG>字段</STRONG></DIV></TD>
<TD width=192>
<DIV align=center><STRONG>说明</STRONG></DIV></TD>
<TD width=186>
<DIV align=center><STRONG>示例</STRONG></DIV></TD></TR>
<TR>
<TD height=20 vAlign=top width=189>
<DIV>Country Name</DIV></TD>
<TD vAlign=top width=192>
<DIV>ISO国家代码（两位字符）</DIV></TD>
<TD vAlign=top width=186>
<DIV>CN</DIV></TD></TR>
<TR>
<TD height=20 vAlign=top width=189>
<DIV>State or Province Name</DIV></TD>
<TD vAlign=top width=192>
<DIV>所在省份</DIV></TD>
<TD vAlign=top width=186>
<DIV>Guangdong</DIV></TD></TR>
<TR>
<TD height=20 vAlign=top width=189>
<DIV>Locality Name</DIV></TD>
<TD vAlign=top width=192>
<DIV>所在城市</DIV></TD>
<TD vAlign=top width=186>
<DIV>Shenzhen</DIV></TD></TR>
<TR>
<TD height=20 vAlign=top width=189>
<DIV>Organization Name</DIV></TD>
<TD vAlign=top width=192>
<DIV>公司名称</DIV></TD>
<TD vAlign=top width=186>
<DIV>Shenzhen Willrey eCommerce Limited</DIV></TD></TR>
<TR>
<TD height=20 vAlign=top width=189>
<DIV>Organizational Unit Name</DIV></TD>
<TD vAlign=top width=192>
<DIV>部门名称</DIV></TD>
<TD vAlign=top width=186>
<DIV>IT Dept.</DIV></TD></TR>
<TR>
<TD height=20 vAlign=top width=189>
<DIV>Common Name</DIV></TD>
<TD vAlign=top width=192>
<DIV>申请证书的域名</DIV></TD>
<TD vAlign=top width=186>
<DIV>www.willrey.com</DIV></TD></TR>
<TR>
<TD height=20 vAlign=top width=189>
<DIV>Email Address</DIV></TD>
<TD vAlign=top width=192>
<DIV>不需要输入</DIV></TD>
<TD vAlign=top width=186></TD></TR>
<TR>
<TD height=20 vAlign=top width=189>
<DIV>A challenge password</DIV></TD>
<TD vAlign=top width=192>
<DIV>不需要输入</DIV></TD>
<TD vAlign=top width=186></TD></TR></TBODY></TABLE><BR><BR>私钥文件（domain.key）和证书签名请求文件（domain.csr）文件生成后，用户需妥善保管。</TD></TR>
<TR>
<TD bgColor=#e9e9e9 vAlign=top><SPAN class=STYLE2><STRONG>提交CSR，申请证书</STRONG></SPAN></TD></TR>
<TR>
<TD vAlign=top>递交证书申请表及相关资料，并把证书请求文件（CSR）提交给维瑞客服。我们确认资料齐全后，三个工作日内完成证书颁发。</TD></TR></TBODY></TABLE>制作CSR申请文件 <BR>在生成CSR文件时同时生成您的私钥文件，如果您丢了私钥或忘了私钥密码，证书不能安装成功！您必须重新生成私钥和CSR文件，免费重新颁发新的证书。为了避免此情况的发生，请在生成CSR后一定要备份私钥文件和记住私钥密码，最好是在收到证书之前不要还原或者重装服务器。 </DIV>
<DIV>"openssl"用于生成私钥和CSR，OpenSSL一般安装在/user/bin下，如果您的系统安装在其他目录，请指定正确的目录路径。</DIV>
<DIV>openssl req -new -nodes -newkey rsa:2048 -keyout domain.key -out domain.csr</DIV>
<DIV>以上命令将会在当前目录下生成domain.key（私钥文件）和domain.csr（CSR，证书签名请求文件）两个文件，用户可以指定所生成的文件名和所在的路径，接下来提示用户继续输入申请证书的详细信息：<BR>&nbsp; Loading 'screen' into random state - done<BR>Generating a 2048 bit RSA private key<BR>.........................................+++<BR>........................................+++<BR>writing new private key to 'domain.key'<BR>----------------------------------<BR>You are about to be asked to enter information that will be incorporated<BR>into your certificate request.<BR>What you are about to enter is what is called a Distinguished Name or a DN.<BR>There are quite a few fields but you can leave some blank<BR>For some fields there will be a default value,<BR>If you enter '.', the field will be left blank.<BR>-------------------------------<BR>Country Name (2 letter code) :CN<BR>State or Province Name (full name) :Guangdong<BR>Locality Name (eg, city) []:Shenzhen<BR>Organization Name (eg, company) : Shenzhen Willrey eCommerce Limited <BR>Organizational Unit Name (eg, section) []:IT Dept.<BR>Common Name (eg, YOUR name) []:www.willrey.com<BR>Email Address []:<BR>Please enter the following 'extra' attributes<BR>to be sent with your certificate request<BR>A challenge password []:<BR>An optional company name []: </DIV>
<DIV>&nbsp;</DIV>
<DIV>从Email地址开始，下面的信息都不需要，请保留为空，直接回车即可。需要输入的信息说明请见下表：</DIV>
<DIV>字段 说明 示例 <BR>Country Name ISO国家代码（两位字符） CN <BR>State or Province Name 所在省份 Guangdong <BR>Locality Name 所在城市 Shenzhen <BR>Organization Name 公司名称 Shenzhen Willrey eCommerce Limited <BR>Organizational Unit Name 部门名称 IT Dept. <BR>Common Name 申请证书的域名 <A href="http://www.willrey.com/" target=_blank>www.willrey.com</A> <BR>Email Address 不需要输入&nbsp; <BR>A challenge password 不需要输入&nbsp; </DIV>
<DIV><BR>私钥文件（domain.key）和证书签名请求文件（domain.csr）文件生成后，用户需妥善保管。 <BR>提交CSR，申请证书 <BR>递交证书申请表及相关资料，并把证书请求文件（CSR）提交给维瑞客服。我们确认资料齐全后，三个工作日内完成证书颁发。 <BR></DIV>
页: [1]
查看完整版本: SSL证书请求文件(CSR)生成指南 - Apache SSL