How to Generate an SSL CSR (Certificate Signing Request)
- November 24th, 2009
- Write comment
In order to request a signed SSL/TLS certificate you have to send the Certification Authority a proper formed request often indicated just as “CSR” together with the other details.
If you are using Apache you can generate your passphrase-protected RSA 1024 bit key using openssl with:
openssl genrsa -des3 -out your.host.tld.key 1024
And then generate the CSR to send ‘em, again using openssl with:
openssl req -new -key your.host.tld.key -out your.host.tld.csr
You will be prompted for some information that must be included in the CSR itself, and in short it will be done.
That will please Alice for a while since if her postcard is sent out from the <alice-port> it’s gonna be forwarded to wonderland over a (supposed) secure channel and then sent to Bob, but blues is aroud the corner because she’s now used to be carefree using her unsecure application protocol from wonderland and she doesn’t want to set up forwarding for each of her friends. Anyway, she may be fine using ssh as a SOCKS server reached over the secure channel with:
Some times you want to recursively check the contents of a given directory right in your shell asking for its inherent tree.
A bash script I wrote to quick build the requested 

