"openssl req -new -key server.key -out server.csr" should do the job. server.key is your server's private key file. If you do not have one yet, use "openssl genrsa -out server.key 1024" to generate a 1024 bit RSA key.

- Jörn



Ronan wrote:

no its not there i dont think.
basically what is happening is that im programming an interface to Active directory and one of the features is a change password option. this can only be done obviously over ssl. This is why i need the certificate generaed so i can sign it with our root CA.
I need to generate the CSR and private key on the server (windows 2000 advanced) but when i try windows always signs it for me with its own rootCA ( which is very annoying) is there another way of doing this...? ie using openssl


ronan

Juan Angel Martin (AC Camerfirma) wrote:

Hi,

http://www.thawte.com/support/keygen/

There's a menu in the right, select your server type.


Juan Angel Martin Gomez
AC Camerfirma
Tel. +34 920252750 Fax +34 920252732
http://www.camerfirma.com



-----Mensaje original-----
De: [EMAIL PROTECTED] [mailto:owner-openssl-
[EMAIL PROTECTED] En nombre de Ronan
Enviado el: miércoles, 20 de octubre de 2004 16:58
Para: [EMAIL PROTECTED]
Asunto: csr for windows server

how do i generate a CSR for a windows 2000 advanced server?

it its to be signed by my own CA cert

the cert will be used for internal comms

I dont know how to genereate it on the windows box.
I need to generate the key first  and then the cert, is that right???

thanks

ronan
--
Regards

Ronan McGlue
==============
Analyst/Programmer
Information Services
Queens University Belfast
BT7 1NN

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]



______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]



______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Reply via email to