SSL Server Key W/O Pass Phrase?

Arty Ziff · 07-16-2010, 05:17 PM

I'm having trouble trying to generate an SSL server key WITHOUT a pass phrase.

Here's what I did. Wrong, obviously.

Code:

# Create the server key

cd /usr/bin/

openssl genrsa -des3 -out MyDomain.key 2048

# Remove passphrase

cp MyDomain.key MyDomain.key.org

openssl rsa -in MyDomain.key.org -out MyDomain.key

bathory · 07-17-2010, 03:17 AM

Hi,

Why you think it's wrong?
After that you have to create a CSR (certificate request based on this key) and create the certificate. When creating the CSR pay attention to the Common Name (CN). It must match your server name. The commands you have to use, are:

Code:

openssl req -new -key server.key -out server.csr
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

To verify the certificate you can run:

Code:

openssl verify server.crt

Regards