Skip to main content

Generating CSRs

A Certificate Signing Request (CSR) is required to obtain a signed SSL certificate for your Device42 instance. This page covers how to generate a CSR and self-signed certificate using OpenSSL, and how to apply the certificate via the Appliance Manager.

Additional instructions for generating certificates with OpenSSL are available on the Device42 support site.

Generate a CSR with OpenSSL​

Open a terminal with the openssl package installed. The following commands generate a self-signed SSL certificate from a new or existing OpenSSL installation.

  1. Generate a private key for your server CA (Certificate Authority):

    openssl genrsa -des3 -out ca.key 4096

  2. Create a certificate file using the generated CA private key:

    openssl req -new -x509 -days 3650 -key ca.key -out ca_file

  3. Create a private key for your new SSL certificate:

    openssl genrsa -des3 -out server.key 2048

  4. Create a certificate signing request (CSR) for your SSL certificate:

    openssl req -new -key server.key -out server.csr

  5. Sign the CSR with your CA key and export the signed x509 certificate:

    openssl x509 -req -days 365 -in server.csr -CA ca_file -CAkey ca.key -set_serial 01 -out cert_file

  6. Export the private key file in the correct format:

    openssl rsa -in server.key -out key_file

Once you have the certificate files, see Add an HTTPS Certificate via Appliance Manager for instructions on applying them.

Generate Non-Production CSRs​

caution

Use the OpenSSL method above for production environments. Online CSR generators should only be used for non-production purposes — a private key generated by a third party is unlikely to be truly private.

For a quick non-production CSR, you can use an online generator such as csrgenerator.com at your own risk.