2

I want to generate a CSR key for my SSL certificate.

So I used this command:

openssl req -new -newkey rsa:2048 -nodes -sha256 -keyout SUBDOMAIN_DOMAIN_TLD.key -out SUBDOMAIN_DOMAIN_TLD.csr

Of course I replaced the SUBDOMAIN_DOMAIN_TLD with my URL.

My question is: Where is the generated CSR file located on the server? In which folder?

2

If your OpenSSL command is this:

openssl req -new -newkey rsa:2048 -nodes -sha256 -keyout SUBDOMAIN_DOMAIN_TLD.key -out SUBDOMAIN_DOMAIN_TLD.csr

Then SUBDOMAIN_DOMAIN_TLD.key and SUBDOMAIN_DOMAIN_TLD.csr will be generated in the same folder/directory you happen to be in. The -keyout and -out options are simply setting a filepath so SUBDOMAIN_DOMAIN_TLD.key and SUBDOMAIN_DOMAIN_TLD.csr will be written to your current filepath.

Remember, tools like OpenSSL are not magic. The create text files that might contain what appears to be magical hashes. But on an operational level they are just text files with data in them. Where you place those files are up to you.

So if you create these in your own user folder and want to use them for SSL on an Apache web server, then you would have to decide on a solid, safe and final place to place them for reference.

In the case of the CSR (Certifcate Signing Request) that would only really be used to sign the certificate with the entity you are purchasing an SSL certificated from; it’s just a digital signature. You sign the certificate with the CSR via whatever web interface they have, after jumping through some hoops and paying them you’ll get CRT and possibly need a PEM file—like on services such as Gandi—and setting those with your your KEY file will allow you to enable SSL in Apache… Or whatever application you are using the certificate with.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.