Creating SSL sertificate request in RHEL 5

kenneho · 09-17-2008, 06:54 AM

Hello all.

A few day ago I made a SSL certificate request on my RHEL 5 server, using the /etc/pki/tls/certs/Makefile script that ships with the distribution. The command I used for making the request was "make certreq".

Due to a typo I tried to rerun the script, but know I'm asked to create a passphrase. Anyone knows why I'm asked to create a passphrase now, and why I wasn't asked to do so the first time? What is this passphrase protecting anyways?

Regards,
kenneho

datopdog · 09-18-2008, 02:28 AM

The passphrase is used to protect your private key.

kenneho · 09-18-2008, 06:03 AM

Quote:

Originally Posted by datopdog

The passphrase is used to protect your private key.

When I ran through the script the first time to generate the keys I was was prompted to create a password for the private key.

But why would I be prompted now when I try to generate a new pair of keys, when the keys are not ever created. Seems like it's asking me to create a password for the old key.

linuxgurusa · 09-18-2008, 06:10 AM

Quote:

Originally Posted by kenneho

When I ran through the script the first time to generate the keys I was was prompted to create a password for the private key.

But why would I be prompted now when I try to generate a new pair of keys, when the keys are not ever created. Seems like it's asking me to create a password for the old key.

Just press enter without typing a password ? That is if you don't want to create one

kenneho · 09-18-2008, 06:24 AM

Quote:

Originally Posted by linuxgurusa

Just press enter without typing a password ? That is if you don't want to create one

Tried that - it didn't work. :/

Just don't understand why I _must_ create a password, and which key it's supposed to guard.

linuxgurusa · 09-18-2008, 06:27 AM

Quote:

Originally Posted by kenneho

Tried that - it didn't work. :/

Just don't understand why I _must_ create a password, and which key it's supposed to guard.

Are you creating a key for a SSl website you are going to use ?

I use openssl to do keys and stuff for me

openssl genrsa -out keyname.key 1024

kenneho · 09-18-2008, 06:58 AM

Quote:

Originally Posted by linuxgurusa

Are you creating a key for a SSl website you are going to use ?

I use openssl to do keys and stuff for me

openssl genrsa -out keyname.key 1024

Yes I am. But the scripts shipped with RHEL user openssl to generate the keys, and I'm sure I can get the script to work without having to resort to manual prosedures. But if everything else fails I'll try your approach.