{"id":1449,"date":"2021-04-20T08:20:58","date_gmt":"2021-04-19T20:20:58","guid":{"rendered":"https:\/\/www.ronella.xyz\/?p=1449"},"modified":"2021-04-20T08:20:58","modified_gmt":"2021-04-19T20:20:58","slug":"private-signing-a-csr","status":"publish","type":"post","link":"https:\/\/www.ronella.xyz\/?p=1449","title":{"rendered":"Private Signing a CSR"},"content":{"rendered":"

Signing the CSR<\/h2>\n
    \n
  1. \n

    Download OpenSSL binaries from the following link if you are using windows:<\/p>\n

    https:\/\/slproweb.com\/products\/Win32OpenSSL.html<\/a><\/p>\n<\/li>\n

  2. \n

    Create a v3.cnf<\/strong> file using the following template:<\/p>\n

    authorityKeyIdentifier=keyid,issuer\nbasicConstraints=CA:FALSE\nkeyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment\nsubjectAltName          = @alternate_names\nnsComment           = \"Self-signed Certificate\"\n\n[ alternate_names ]\n\nDNS.1       = <DNS_1>\n#DNS.2       = <DNS_2>\n#DNS.3       = <DNS_3>\n#DNS.4       = <DNS_4>\n\n# Add these if you need them. But usually you don't want them or\n#   need them in production. You may need them for development.\n# DNS.5       = localhost\n# DNS.6       = localhost.localdomain\n# DNS.7       = 127.0.0.1\n\n# IPv6 localhost\n# DNS.8     = ::1<\/code><\/pre>\n
    Replace the following fields on the template:<\/p>\n\n\n\n\n\n
    Field Name<\/th>\nDescription<\/th>\n<\/tr>\n<\/thead>\n
    DNS_<INDEX><\/td>\nIdentify the DNS names from the CSR.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
    Example:<\/p>\n
    authorityKeyIdentifier=keyid,issuer\nbasicConstraints=CA:FALSE\nkeyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment\nsubjectAltName          = @alternate_names\nnsComment           = \"Self-signed Certificate\"\n\n[ alternate_names ]\n\nDNS.1       = www.ronella.xyz\n#DNS.2       = <DNS_2> \n#DNS.3       = <DNS_3>\n#DNS.4       = <DNS_4>\n\n# Add these if you need them. But usually you don't want them or\n#   need them in production. You may need them for development.\n# DNS.5       = localhost\n# DNS.6       = localhost.localdomain\n# DNS.7       = 127.0.0.1\n\n# IPv6 localhost\n# DNS.8     = ::1<\/code><\/pre>\n<\/li>\n
  3. \n
    Generate a CA private key<\/strong> and certificate<\/strong> pair. The following link can help:
    \nPRIVATE CERTIFICATION AUTHORITY (CA)<\/a><\/p>\n<\/li>\n
  4. \n
    Once you have the pair (i.e. key is ca.key.pem<\/strong> and the certificate is ca.cert.crt<\/strong>)<\/em>, sign the CSR using the following command:<\/p>\n
    openssl x509 -req -days 365 -sha256 -in domain.csr -extfile v3.cnf -CA ca.cert.crt -CAkey ca.key.pem -CAcreateserial -out domain.crt<\/code><\/pre>\n<\/li>\n<\/ol>\n
    Viewing the generated certificate from CSR<\/h2>\n
      \n
    1. \n
      View the signed certificate using the following the command:<\/p>\n
      openssl x509 -in domain.crt -text<\/code><\/pre>\n<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"
      Signing the CSR Download OpenSSL binaries from the following link if you are using windows: https:\/\/slproweb.com\/products\/Win32OpenSSL.html Create a v3.cnf file using the following template: authorityKeyIdentifier=keyid,issuer basicConstraints=CA:FALSE keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment subjectAltName = @alternate_names nsComment = “Self-signed Certificate” [ alternate_names ] DNS.1 = <DNS_1> #DNS.2 = <DNS_2> #DNS.3 = <DNS_3> #DNS.4 = <DNS_4> # […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[23],"tags":[],"_links":{"self":[{"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=\/wp\/v2\/posts\/1449"}],"collection":[{"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1449"}],"version-history":[{"count":1,"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=\/wp\/v2\/posts\/1449\/revisions"}],"predecessor-version":[{"id":1450,"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=\/wp\/v2\/posts\/1449\/revisions\/1450"}],"wp:attachment":[{"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1449"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1449"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ronella.xyz\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1449"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}