Generating a new CSR to get your shiny new SSL certificate

Adding a new SSL client involves creating a key and certificate signing request. You can always get these instructions from your certificate company, ours is Geo Trust, here is their instructions. http://www.geotrust.com/resources/csr/apache2.htm


# create key w/out password
openssl genrsa -out domainname.key 2048

# view key:
openssl rsa -noout -text -in domainname.key

# gen  the CSR:
openssl req -new -key domainname.key -out domainname.csr