s****y
发帖数: 503 | 1 我们服务器需要从SHA1升级到SHA2，好像先要得到Certificate Signing Request (CSR
)，我没有服务器的access，是不是CSR可以在我的本地生成？我有Macbook，能用Mac生
成CSR吗？ | a9
发帖数: 21638 | 2 可以。
看openssl文档
CSR
【在 s****y 的大作中提到】
: 我们服务器需要从SHA1升级到SHA2，好像先要得到Certificate Signing Request (CSR
: )，我没有服务器的access，是不是CSR可以在我的本地生成？我有Macbook，能用Mac生
: 成CSR吗？
| ET
发帖数: 10701 | 3 spotlight - > search "keychain" -> open Keychain Access app ->Certificate
Assistant ->Request a certificate from authority
CSR
【在 s****y 的大作中提到】
: 我们服务器需要从SHA1升级到SHA2，好像先要得到Certificate Signing Request (CSR
: )，我没有服务器的access，是不是CSR可以在我的本地生成？我有Macbook，能用Mac生
: 成CSR吗？
| k***5
发帖数: 583 | 4 https://support.godaddy.com/help/article/5269/generating-a-certificate-
signing-request-csr-apache-2-x
Log in to your server's terminal (SSH).
At the prompt, type the following command:
openssl req -new -newkey rsa:2048 -nodes -keyout yourdomain.key -out
yourdomain.csr
Replace yourdomain with the domain name you're securing. For example, if
your domain name is coolexample.com, you would type coolexample.key and
coolexample.csr.
Enter the requested information:
Common Name: The fully-qualified domain name, or URL, you're
securing.
If you are requesting a Wildcard certificate, add an asterisk (*) to
the left of the common name where you want the wildcard, for example *.
coolexample.com.
Organization: The legally-registered name for your business. If you
are enrolling as an individual, enter the certificate requestor's name.
Organization Unit: If applicable, enter the DBA (doing business as)
name.
City or Locality: Name of the city where your organization is
registered/located. Do not abbreviate.
State or Province: Name of the state or province where your
organization is located. Do not abbreviate.
Country: The two-letter International Organization for
Standardization (ISO) format country code for where your organization is
legally registered.
If you do not want to enter a password for this SSL, you can leave
the Passphrase field blank. However, please understand there might be
additional risks.
Open the CSR in a text editor and copy all of the text.
Paste the full CSR into the SSL enrollment form in your account. |
|
