Sun Java System WS is a Java-based web server, which implies that CSR generation can be accomplished in two ways: through the SJS web interface (Server Certificate Wizard) or via shell commands (keytool).
I. Wizard.
To generate CSR via the Sun Java System WebServer certificate wizard, follow the steps below:
1) Click Server Certificates tab >> Request button.
2) Select Configuration.
Select a configuration from the configuration list for which you need to install the certificate. Configuration name can be either your domain name, a hostname or a server name (e.g. localhost if created and addressed in LAN only)
After the configuration is selected, click Next.
3) Select Tokens.
Select the token (Cryptographic Device) which contains the keys. A security token (or sometimes authentication token, USB token, cryptographic token, software token) may be a physical device that an authorized user of computer services is given to ease authentication. Choose “internal” as the private key must be stored on the server only.
Selecting other than “internal” will cause the private key to be saved elsewhere preventing the certificate from further installation.
Click Next.
4) Enter Details.
In this form, data embedded in the signing request should be filled. Use only alphanumeric characters. Otherwise, the CSR can be rejected by a Certificate Authority. Note that:
Server Name (CN): the domain that you would like to have the certificate for (FQDN only). For Wildcard certificate, use *.example.com. More information can be found here.
Organization (O): your company legal business name – necessary for Organization Validation and Extended Validation certificates (for Domain Validation – ‘NA’ can be used)
Locality (L): the city you or your company is situated in.
State (ST): state or province.
Country (C): name of your country and two-digit ISO compliant country code that can be chosen from the drop-down list.
After the form is filled, click Next.
5) Choose Certificate Options.
Here, you are required to provide the key information. For key type, you can choose RSA or ECC. If the key type is RSA, the key size should be at least 2048 (standard recommended key size). If your key type is ECC, you will also need to select a curve.
You can choose those curves from the dropdown: prime256v1 (elliptic curve), secp384r1 (elliptic curve) or secp521r1. However, keep in mind that curve 521 is not supported by Chromium engine – SSL certificates will show errors in Chromium-based browsers.
More information can be found here.
6) Select Certificate Type.
Select the Certificate Signing Authority (CSA) for the certificate (Self-signed or CA signed). Select CA signed only.
7) Once Next is clicked, press Finish.
You should be provided with a Certificate Signing Request in base64-encoded text format.
Your generated CSR can be used during the activation. The activation guide can be found here.
After that, the issued certificate can be installed using this guide.
Leverage 1Byte’s strong cloud computing expertise to boost your business in a big way
1Byte provides complete domain registration services that include dedicated support staff, educated customer care, reasonable costs, as well as a domain price search tool.
Elevate your online security with 1Byte's SSL Service. Unparalleled protection, seamless integration, and peace of mind for your digital journey.
No matter the cloud server package you pick, you can rely on 1Byte for dependability, privacy, security, and a stress-free experience that is essential for successful businesses.
Choosing us as your shared hosting provider allows you to get excellent value for your money while enjoying the same level of quality and functionality as more expensive options.
Through highly flexible programs, 1Byte's cutting-edge cloud hosting gives great solutions to small and medium-sized businesses faster, more securely, and at reduced costs.
Stay ahead of the competition with 1Byte's innovative WordPress hosting services. Our feature-rich plans and unmatched reliability ensure your website stands out and delivers an unforgettable user experience.
As an official AWS Partner, one of our primary responsibilities is to assist businesses in modernizing their operations and make the most of their journeys to the cloud with AWS.
FURTHER READING: |
| 1. CSR Generation on SonicWall |
| 2. Creating a CSR in Plesk Onyx |
| 3. Generating a CSR in Node.js |
II. Using keytool utility.
To generate a CSR using keytool, you need to:
1) Run the following command in your CLI (command line interface):
keytool -genkey -alias < keystore alias > -keyalg RSA -keysize 2048 -keystore < keystore name > .jks -storepass < keystore password >
keystore alias, keystore name, keystore password should be replaced with your own details.
Default keystore alias is mykey, keystore name is keystore.jks, and the password – chageit.
2) Keytool will ask you the information needed for CSR generation. Fill the needed information like it was explained earlier and the key will be created along with the entered data.
3) Run the next command to generate the CSR for the certificate activation:
keytool -certreq -alias < keystore alias > -file < your CSR file name >.csr -keystore < keystore name >.jks
4) After executing this command and entering the keystore password, the CSR can be found in .csr file.
You can open that file using Notepad or TextEdit or using a shell text editor like nano or vi. Use the CSR in the certificate activation.
The issued certificate can be installed with the help of this guide.