Ask a Question

Certificate Signing Request (CSR) Generation Instructions for Apple Mac OS X Server 10.4

Solution


This document was created to assist with CSR generation on a Apple Mac OS X Server 10.4.  If this document can not be used within the environment, RapidSSL recommends contacting an organization that supports Apple Mac OS X Server 10.4

NOTE: Using the Server Admin utility to create certificate requests for new certificates and renewals is not recommended, as it can lead to issues when installing the new SSL certificate.
 

Step 1. Generate the Private Key

  1. To create a CSR, the administrator (root) password will be required along with access to the servers' command line - either via Terminal.app or SSH.
     
  2. Connect to the server and run the following three commands:

    cd /etc/httpd/

    sudo openssl req -new -newkey rsa:2048 -nodes -keyout ssl.key/private.key -out certreq.txt

    sudo chmod 640 ssl.key/private.key

     

Step 2. Generate the CSR

  1. When the second command is executed, the user will be prompted to enter the certificate attributes:

    Country Name: The two-letter code for the country where the organization is headquartered.
    State or Province Name: The state in which the organization is headquartered.  Must be spelled in full.
    Locality Name: The city where the organization is headquartered.
    Organization Name: The full, legal entity name of the organization.
    Organizational Unit Name: The department within the organization requesting the certificate.
    Common Name: The website address or FQDN that will be secured by the SSL certificate.  For example, www.bbtest.net or *.bbtest.net for a wildcard.

    NOTE: Please do not enter an email address, challenge password or an optional company name when generating the CSR.
     
  2. Proceed with the Enrolment.  The full text of the CSR file will be submitted with the order.

Once the certificate has been issued, refer to this link for installation instructions.