SSL证书请求文件(CSR)生成指南 - C2net Stronghold
重要注意事项 An Important Note Before You Start
By far the most common problem users have when going through this process is related to private keys. If you lose or cannot access a private key, you cannot use the certificate we issue to you and will need to request a free reissue. To ensure this never happens, we advise that a backup of the private key file is made and that a note is made of the password that is used to protect the export of the private key.
Stronghold Key and CSR Generation
Stronghold keys and certificates are managed through three scripts:
genkey, getca and genreq.
These are part of the normal Stronghold distribution.
Keys and certificates are stored in the directory $SSLTOP/private /, where SSLTOP is usually /usr/local/ssl .
If you don't yet have a key for your server:
Type genkey servername to create a key called servername.key in the ssl/private directory. This script will also generate a CSR: follow the instructions given there and choose Thawte as your CA. When you are done, make sure you have a backup of the entire ssl/private directory of your Stronghold installation. Your certificate will not work if you lose the private key you just generated.
If you already have a key for your server:
Type genreq servername to generate only a CSR.
Again, choose Thawte as your CA and follow the instructions to get the CSR for pasting into our online request form.
Once you have been issued with a certificate, you should use the getca servername < certfile command to install the certificate.
测试CSR和把CSR发给WoSign, Start the certificate request process
生成CSR后，建议您自己测试一下生成的CSR文件是否正确，请点击 这里 测试您的CSR文件。请把测试成功的CSR文件发给WoSign即可。请一定不要再动您的服务器，等待证书的颁发。
To submit the CSR to WoSign for processing you should start the certificate enrollment process.