Home Linux Server Create a CSR on Linux using OpenSSL

Create a CSR on Linux using OpenSSL

by Thạch Phạm
Published: Last Updated on

Generate CSR on Linux using OpenSSL in 4 easy steps.


In this article, AZDIGI will show you how to generate a CSR to serve the needs of installing free and paid SSL on a Linux server, please see the specific steps below.

Implementation Guide

Step 1: SSH into your Linux server

To generate CSR on Linux, we first need to SSH or access your VPS/server as root. If you don’t know how to SSH into your VPS/Server, you can refer to the following tutorial:

After successfully SSH, we continue with step 2 to continue the configuration.

Step 2: Check and install OpenSSL

First, use the command below to check if OpenSSL is installed on your server.

AZDIGI Tutorial
rpm -qa | grep -i openssl

If the results show the content below, your server has OpenSSL installed.

Create a CSR on Linux using OpenSSL

Conversely, if the system doesn’t display anything, it means that OpenSSL is not installed and you need to install it with the following command:

  • CentOS/RedHat
AZDIGI Tutorial
yum install -y openssl openssl-devel openssl-dev
  • Debian/Ubuntu
AZDIGI Tutorial
apt-get install -y openssl

Step 3: Create a folder containing the private key and public key (CSR)

Before going into creating the private key and public key, you need to create a folder containing them, you can create and save them in an easy-to-remember place.

  • Create a folder containing the private key
AZDIGI Tutorial
mkdir /usr/local/ssl
mkdir /usr/local/ssl/certificate
  • Initialize private key file (replace thegioibecon = file name to set)
AZDIGI Tutorial
openssl genrsa -out /usr/local/ssl/certificate/thegioibecon.key 2048
  • Initialize CSR with the newly created private key input (replace thegioibecon = file name to set)
AZDIGI Tutorial
openssl req -new -sha256 -key /usr/local/ssl/certificate/thegioibecon.key -out /usr/local/ssl/certificate/thegioibecon.csr

Next, you will need to enter the necessary information as follows:

  • Country code: Enter VN in capital letters
  • State: Enter Hanoi or Ho Chi Minh
  • Locality: Enter Hanoi or Ho Chi Minh
  • Company (or Organization): Enter the company name in English, just like in the BUSINESS license
  • Organization Unit: Enter IT Department
  • Common name: Enter the domain you want to install SSL (important)
Create a CSR on Linux using OpenSSL

After creating, you need to proceed to store these 2 files carefully to use in setting up SSL later.

Step 4: Check the generated CSR

After creating the Private key and Public key (CSR) completed in step 3, you moved to the path created by the 2 files above at: /usr/local/ssl/certificate and opened the content of the *.csr file to check if the information is correct.

Here I open a file named thegioibecon.csr, this is my CSR file.

Create a CSR on Linux using OpenSSL

Now you can access some online CSR check pages below and paste the content of the CSR file to check the information.

SSLShopper CSR Decoder
CSR Decoder

Create a CSR on Linux using OpenSSL

If the information is correct, you can send this CSR content to the unit you bought the SSL from to get the Certificate.

So in this article, AZDIGI showed you how to create a Private Key and CSR on Linux. If you find this article useful, don’t forget to share it widely!

You can refer to other instructions at the link below:

If you need assistance, you can contact support in the ways below:

Đánh giá

Tham gia nhóm hỗ trợ Server - Hosting

Tham gia nhóm Hỗ trợ Server - Hosting & WordPress để cùng nhau hỏi đáp và hỗ trợ các vấn đề về WordPress, tối ưu máy chủ/server.

Tham gia ngay

Bài viết cùng chuyên mục

AZDIGI – Không chỉ là đơn vị hàng đầu trong lĩnh vực Web Hosting và Máy chủ, chúng tôi mong muốn mang lại những kiến thức bổ ích nhất và luôn cập nhật thường xuyên cho cộng đồng người đam mê thiết kế website, công nghệ,…

Vui lòng không sao chép nội dung nếu chưa xin phép. Designed and Developed by PenciDesign