Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

When creating a CSR with openSSL it asks me:

Enter PEM pass phrase:

After that it asks:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:

I read that pem pass phrase is for encrypting the key file. And any service(like apache) using the key file will ask for pem pass phrase when rebooting the service. Then what is challenge password?

share|improve this question

1 Answer 1

up vote 6 down vote accepted

This adds the challengePassword attribute to the certificate request, described in PKCS#9 section 5.4.1:

5.4.1 Challenge password

The challengePassword attribute type specifies a password by which an entity may request certificate revocation. The interpretation of challenge passwords is intended to be specified by certificate issuers etc; no particular interpretation is required.

This attribute is part of the request and will not be present in the final certificate. In most cases, you can just leave this attribute empty – most CAs ignore it.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.