mirror of
https://github.com/Crocmagnon/blog.git
synced 2024-09-19 18:37:36 +02:00
43 lines
867 B
Markdown
43 lines
867 B
Markdown
---
|
|
title: "Create a CSR with SAN"
|
|
tags: ['Certificates', 'OpenSSL', 'Quick Note', 'TLS']
|
|
date: 2022-12-20T13:56:56.467033+00:00
|
|
aliases: ["/create-a-csr"]
|
|
---
|
|
Another quick note today: how to generate a CSR for a basic certificate supported by modern browsers (includes `Subject Alternative Name`).
|
|
|
|
## Config file
|
|
|
|
```toml
|
|
# example.conf
|
|
[req]
|
|
prompt = no
|
|
distinguished_name = dn
|
|
req_extensions = req_ext
|
|
|
|
[dn]
|
|
CN = example.com
|
|
O = Company Name
|
|
L = Lyon
|
|
C = FR
|
|
|
|
[req_ext]
|
|
subjectAltName = DNS: example.com, IP: 192.168.1.1
|
|
```
|
|
|
|
Of course, remember to adjust the settings according to the organization you're creating the CSR for:
|
|
|
|
* `[dn]` (distinguished name) section
|
|
* `subjectAltName` line (DNS and IP)
|
|
|
|
## Private key
|
|
|
|
```bash
|
|
openssl genrsa -out example.key 4096
|
|
```
|
|
|
|
## CSR
|
|
|
|
```bash
|
|
openssl req -new -config example.conf -key example.key -out example.csr
|
|
```
|