How to Generate a CSR for IBM HTTP Server


The CSR needs to contain the following attributes:



Step 1: Generate a keypair

  1. Use the utility "openssl" to generate the key and CSR. This utility comes with the OpenSSL package. You usually install it under /usr/local/ssl/bin. (If you have installed openssl elsewhere you will need to adjust these instructions appropriately).
  2. Generate a private key using the following command:  openssl genrsa -des3 2048 > verisign.key
Step 2: Generate a Certificate Signing Request (CSR)

  1. Change directory to your SSL Certificate directory: cd /usr/local/ssl/crt

  2. Generate a CSR using the following command:  
    openssl req -new -key ./verisign.key > verisign.csr  

  3. Verify your CSR

  4. To copy and paste the information into the enrollment form, open the file verisign.csr in a text editor that does not add extra characters (Notepad or vi are recommended).