[ notes to myself ]

Generate CSR with SAN

1 min read

  1. Generate server private key
openssl genrsa -out notes.runtimeterror.dev.key 4096
  1. Generate configuration file csr.conf
[ req ]
default_bits = 4096
distinguished_name = req_distinguished_name
req_extensions = v3_req
prompt = no

[ req_distinguished_name ]
C = US
ST = Alabama
L = Huntsville
O = runtimeterror.dev
OU = blog
CN = $(hostname)

[ v3_req ]
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names

[ alt_names ]
DNS.1 = $(hostname)
DNS.2 = $(hostname -s)
DNS.3 = $(hostname -i)
  1. Generate CSR
openssl req -new -out notes.runtimeterror.dev.csr -key notes.runtimeterror.dev.key -config csr.conf

See also:

Backlinks