Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Windows 7 - How to generate CSR when IIS is not installed

Tags:

ssl

windows-7

csr

My .NET application will be communicating with a third party server application that is implemnted as web-service over SSL. This application will run from different flavours of Windows 7 platform. The server application requires me to generate CSR file. The only way I can find generating a CSR is via IIS but this may not necessarily be installed on all computer where my application will be hosted. Any ideas on how can I generate a CSR on Win 7 platform without using IIS?

like image 924
Silverlight Student Avatar asked Jun 24 '11 13:06

Silverlight Student


People also ask

How do I generate CSR for SSL certificate in Windows without IIS?

CSR generation in MMC (Microsoft Management Console) Open the Certificates snap-in in MMC by following these steps: Win+R >> mmc.exe >> OK >> File >> Add/Remove Snap-in >> Certificates >> Add >> Computer account >> Next >> Local computer >> Finish >> OK.

Do I need to generate a CSR on the server?

Some servers, including Apache and NGINX servers, allow you to use the old CSR to renew your SSL certificate and install a new certificate without generating a new CSR, however, security best-practices suggest that you should generate a new private key and CSR when renewing your SSL cert.


1 Answers

For a more recent version of openssl...
https://www.openssl.org/community/binaries.html links to
https://wiki.openssl.org/index.php/Binaries which links to
http://slproweb.com/products/Win32OpenSSL.html which has links for win64 and win32 openssl.

Otherwise, you should be able to install openssl v0.98h on windows with this:
http://gnuwin32.sourceforge.net/packages/openssl.htm

Run the openssl at the command prompt (Start->Run->"cmd.exe"):
openssl req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key
or you can use this online tool to generate the openssl command:
https://www.digicert.com/easy-csr/openssl.htm

When you run the openssl req command on your computer, it will generate a CSR (with public key embedded) and private key.

like image 186
velcrow Avatar answered Oct 16 '22 21:10

velcrow