Generate OpenSSL CSR

December 18, 2017

Question : Generate OpenSSL CSR

We have an IronPort C100 server with an installed SSL certificate that is going to expire on June 12th.  I’ve begun the renewal process with Network Solutions, but in order to continue need to provide them with our CSR.  The IronPort server does not have a mechanism for generating a CSR so IronPort technical support recommends using OpenSSL to generate the necessary CSR.  I’ve tried to install OpenSSL on my Windows XP SP2 PC, but have been unsuccessful.  Can someone please provide me with detailed instructions on where to download the necessary components for OpenSSL, how to install OpenSSL and how to generate the necessary CSR and key files?  Or, does someone know of an online resource, etc. that can generate the files for me?

Solution: Generate OpenSSL CSR

I contacted our IronPort technical support systems engineer and with their guidance completed the following.  I downloaded and successfully installed the Windows distribution of OpenSSL from http://www.openssl.org/related/binaries.html.  I successfully used the installation of OpenSSL to generate a CSR and KEY.  I successfully submitted the CSR to Network Solutions and am awaiting validation and issuance of our renewed certificate.

I have the following instructions for installing the certificate when it’s received.

Access and log into your IronPort servers CLI and complete the following steps to install your certificate and key.  A suggestion for accessing the CLI is Putty (http://www.chiark.greenend.org.uk/~sgtatham/putty).
1.      At the CLI prompt, type certconfig and press enter.
2.      When prompted to choose the operation, type setup and press enter.
3.      When prompted to use one certificate, type y and press enter.
4.      Open your certificate file with a text editor and copy its contents in their entirety.
5.      When prompted to paste the cert, right click on the Putty screen to paste what you previously copied.
6.      Type a . and press enter.
7.      Open your key file with a text editor and copy its contents in their entirety.
8.      When prompted to paste the key, right click on the Putty screen to paste what you previously copied.
9.      Type a . and press enter.
10.      When prompted to choose the operation, press enter.
11.      At the CLI prompt, type commit and press enter.
12.      When prompted to enter some comments, type whatever is appropriate and press enter.
13.      At the CLI prompt, type exit and press enter to close Putty.