Page Comparison

...

Generate key and csr

sudo su

cd /etc/ssl

# generate the passworded key (use an easy password; we're about to strip it)

openssl genrsa -des3 -out server.pass.key 2048

# strip the password (you can now delete server.pass.key)

openssl rsa -in server.pass.key -out server.key

# generate the csr

openssl req -newkey rsa:2048 -nodes -sha256 -keyout server.key -out server.csr

-----

Country Name (2 letter code) [AU]:US

State or Province Name (full name) [Some-State]:Pennsylvania

Locality Name (eg, city) []:Philadelphia

Organization Name (eg, company) [Internet Widgits Pty Ltd]:Chemical Heritage Foundation

Organizational Unit Name (eg, section) []:Library

Common Name (e.g. server FQDN or YOUR name) []:hydra.chemheritage.org

Email Address []:

 

Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:

An optional company name []:

mv server.key private/

mv server.pass.key private/

cd private

chown root:ssl-cert server.*

chmod 640 server.*

...