RE: csr for windows server
As others have mentioned, you can use OpenSSL to generate the request + key, and once you sign the request you'll then need to create a PKCS-12 file containing the certificate and key, then import that into IIS. Alternatively, you can get IIS/CryptoAPI to generate the request and then sign it with OpenSSL or whatever you're using for your CA. Follow the instructions here, sending the request to your own CA of course: http://www.instantssl.com/ssl-certificate-support/csr_generation/iis_ssl _certificate_5x.html Eric > -Original Message- > From: Ronan [mailto:[EMAIL PROTECTED] > Sent: October 21, 2004 04:30 > To: [EMAIL PROTECTED] > Subject: Re: csr for windows server > > no its not there i dont think. > basically what is happening is that im programming an > interface to Active directory and one of the features is a > change password option. > this can only be done obviously over ssl. This is why i need > the certificate generaed so i can sign it with our root CA. > I need to generate the CSR and private key on the server (windows 2000 > advanced) but when i try windows always signs it for me with > its own rootCA ( which is very annoying) is there another way > of doing this...? > ie using openssl > > ronan __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: csr for windows server
"openssl req -new -key server.key -out server.csr" should do the job. server.key is your server's private key file. If you do not have one yet, use "openssl genrsa -out server.key 1024" to generate a 1024 bit RSA key. - Jörn Ronan wrote: no its not there i dont think. basically what is happening is that im programming an interface to Active directory and one of the features is a change password option. this can only be done obviously over ssl. This is why i need the certificate generaed so i can sign it with our root CA. I need to generate the CSR and private key on the server (windows 2000 advanced) but when i try windows always signs it for me with its own rootCA ( which is very annoying) is there another way of doing this...? ie using openssl ronan Juan Angel Martin (AC Camerfirma) wrote: Hi, http://www.thawte.com/support/keygen/ There's a menu in the right, select your server type. Juan Angel Martin Gomez AC Camerfirma Tel. +34 920252750 Fax +34 920252732 http://www.camerfirma.com -Mensaje original- De: [EMAIL PROTECTED] [mailto:owner-openssl- [EMAIL PROTECTED] En nombre de Ronan Enviado el: miércoles, 20 de octubre de 2004 16:58 Para: [EMAIL PROTECTED] Asunto: csr for windows server how do i generate a CSR for a windows 2000 advanced server? it its to be signed by my own CA cert the cert will be used for internal comms I dont know how to genereate it on the windows box. I need to generate the key first and then the cert, is that right??? thanks ronan -- Regards Ronan McGlue == Analyst/Programmer Information Services Queens University Belfast BT7 1NN __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
Re: csr for windows server
no its not there i dont think. basically what is happening is that im programming an interface to Active directory and one of the features is a change password option. this can only be done obviously over ssl. This is why i need the certificate generaed so i can sign it with our root CA. I need to generate the CSR and private key on the server (windows 2000 advanced) but when i try windows always signs it for me with its own rootCA ( which is very annoying) is there another way of doing this...? ie using openssl ronan Juan Angel Martin (AC Camerfirma) wrote: Hi, http://www.thawte.com/support/keygen/ There's a menu in the right, select your server type. Juan Angel Martin Gomez AC Camerfirma Tel. +34 920252750 Fax +34 920252732 http://www.camerfirma.com -Mensaje original- De: [EMAIL PROTECTED] [mailto:owner-openssl- [EMAIL PROTECTED] En nombre de Ronan Enviado el: miércoles, 20 de octubre de 2004 16:58 Para: [EMAIL PROTECTED] Asunto: csr for windows server how do i generate a CSR for a windows 2000 advanced server? it its to be signed by my own CA cert the cert will be used for internal comms I dont know how to genereate it on the windows box. I need to generate the key first and then the cert, is that right??? thanks ronan -- Regards Ronan McGlue == Analyst/Programmer Information Services Queens University Belfast BT7 1NN __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] -- Regards Ronan McGlue == Analyst/Programmer Information Services Queens University Belfast BT7 1NN __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
RE: csr for windows server
Hi, http://www.thawte.com/support/keygen/ There's a menu in the right, select your server type. Juan Angel Martin Gomez AC Camerfirma Tel. +34 920252750 Fax +34 920252732 http://www.camerfirma.com > -Mensaje original- > De: [EMAIL PROTECTED] [mailto:owner-openssl- > [EMAIL PROTECTED] En nombre de Ronan > Enviado el: miércoles, 20 de octubre de 2004 16:58 > Para: [EMAIL PROTECTED] > Asunto: csr for windows server > > how do i generate a CSR for a windows 2000 advanced server? > > it its to be signed by my own CA cert > > the cert will be used for internal comms > > I dont know how to genereate it on the windows box. > I need to generate the key first and then the cert, is that right??? > > thanks > > ronan > -- > Regards > > Ronan McGlue > == > Analyst/Programmer > Information Services > Queens University Belfast > BT7 1NN > > __ > OpenSSL Project http://www.openssl.org > User Support Mailing List[EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] __ OpenSSL Project http://www.openssl.org User Support Mailing List[EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
