All Questions
28
questions
0
votes
0
answers
80
views
Free ipa errors when using SAN in certificate request
When I try to sign a CSR for a device and include the SAN ip attribute it errors with the following.
ERROR: invalid 'csr': IP address in subjectAltName (x.x.x.x) unreachable from DNS names
my IPA ...
- 303
0
votes
0
answers
830
views
how to read ssh_host_rsa_key
I have a vanilla install of ubuntu 22.04 with openssh-server installed. /etc/ssh/ssh_host_rsa_key is automatically created. I can "cat" the file to stdout:
...
- 133
0
votes
1
answer
9k
views
Why do i get openssl error unknown option for -adext?
I am attempting to generate CSR using openssl with subject alternative names however i get an error stating no options for adext. See command below.. I am using OpenSSL 1.0.2k-fips
openssl req -new \
-...
- 123
0
votes
1
answer
551
views
Can I combine my openssl key and csr creation commands in to one command keeping des3 passphrase encryption?
I am in the process of trying to automate/script via shell, a method of post server build config for one of our teams, and one of the final steps after all is installed, is to generate an SSL key and ...
0
votes
1
answer
3k
views
Open SSL Error on Windows 10 - Converting a signed CSR from PEM to CRT
I am attempting to create an IPSec VPN connection with x.509 cert authentication for users.
What follows is a test to get things going and isn't a secure implementation. I will get a certificate from ...
- 3
4
votes
1
answer
2k
views
What does a0:00 in a CSR's Attributes field mean?
What does a0:00 in a CSR's Attributes field mean? (is it null or empty?)
Certificate Request:
Data:
Version: 0 (0x0)
Subject: C=...
Subject Public Key Info:
...
- 213
2
votes
2
answers
3k
views
What's the difference between in generating CSR file from OpenSSL and IIS?
I've been shown how to generate .csr files by using OpenSSL and have successfully created, converted and installed the signed certificates (.pfx files) onto some of our web servers with IIS 10.
I've ...
0
votes
1
answer
1k
views
LibreSSL errors when attempting to copy extensions from CSR to x509 Cert
I'm trying to create an x509 certificate with a very specific set of x509v3 Extensions from a CSR (that already has these Extensions set). I have a CSR in PEM form (?). It looks like this:
-----BEGIN ...
- 111
1
vote
1
answer
6k
views
Can I create a CSR without a Fully Qualified Domain Name?
My client has an Ubuntu server hosted by Digital Ocean. The server has no domain name, we access it via the public IP address. They want to start using https and provided me with a SSL certificate ...
8
votes
1
answer
24k
views
Generate CSR including certificate template information with OpenSSL
I'm generating a CSR with OpenSSL using the following configuration file:
[ req ]
default_bits = 2048
default_keyfile = usercert.key
distinguished_name = req_distinguished_name
...
- 334
2
votes
1
answer
54k
views
Convert text certificate to crt file
I sent the .CSR file to my client, and they send me the final certificate in text code (copy paste into the mail). Can I convert this code into file .CRT ?
The code is OK, I have tested in: https://...
0
votes
1
answer
421
views
Allow Internal CA to sign CSR
So as it says, how am I supposed to allow Internal CA to sign CSR?
This would be for scenarios where you cannot easily replace a private key for a client so the preferred process uses CSR's instead.
...
6
votes
1
answer
34k
views
OpenSSL - Add Subject Alternate Name (SAN) when signing with CA
How can I add a Subject Alternate Name when signing a certificate request using OpenSSL (in Windows if that matters)?
I've generated a basic certificate signing request (CSR) from the IIS interface. ...
- 73
0
votes
1
answer
2k
views
Lost my key file when I generated the csr
This is the first time for me dealing with ssl.
I have created a csr file, but I lost the key file in this generation.
The certificate was issued and I got all the crt files.
Now I want to install it ...
- 209
0
votes
1
answer
908
views
How to add multiple X509v3 Subject Alternatve names during cerificate request (CSR generation) without editing openssl.cnf file
I want to generate CSR for two domains. I have tried according to this http://apetec.com/support/GenerateSAN-CSR.htm But there is no such section available in openssl.cnf file and i don't want to ...
- 155