Problem
Generate csr for Java Web Server
How to generate a CSR for Java Web Server
How do I generate a csr on a Java Web Server
Resolution
NOTE: A key length of 1024 bit is the default, but Thawte recommends the use of a 2048 bit key.
If the request is intended for an Extended Validation certificate or a certificate with a validity period beyond December 31, 2013, the 2048 bit key length will need to be selected.
To generate a CSR in Java Web Server follow the instructions below:
- At the command line, go to the server root directory, and then change down to subdirectory bin. Run the command authstore.
- Use the ImportCA button to import the Thawte CA root keys. The root certificate is located at the following link: http://www.thawte.com/roots
After you install the CA Root you should shutdown your server and restart your workstation.
- Now use the Create button to generate a self-signed certificate.
NOTE: Default parameters are suggested for the first key generated. You will need to fill out following information:
- Fully qualified hostname
- The domain name of the server, for example, www.mycompany.com, as it will appear in the secure URL. It is important that what you put here is in the URL's that link to your server.
- Department (Your department within your company, such as Marketing)
- Organization (Your full organization or company name)
- City (The city where your company is located, such as Redmond or Toronto)
- State or region (For example Washington, Alberta, California, and so on. Within the USA your two letter state code is adequate).
- Two letter country code (Two letter ISO Country designation, for example, US, CA, AU, UK, and so on. Make sure that both letters are in UPPER CASE)
- You will need to provide a passphrase for use whenever you decrypt the data in the keystore.
- Now use the Request button to generate a "Certificate Signing Request" (CSR). Take the CSR and submit it through our forms-based interface here.
- Please take note of your passphrase and back up your new keys at <server-root>/keys. If you do not do this, you risk an extra fee if this key is lost, or cannot be accessed.
- After your certificate is issued, get the certificate in "Standard Format", and use Import button in authstore to import this new certificate into your Java Web Server. Restart your server.
Detailed instructions can be found at the following link : http://www.depi.itch.edu.mx/doc/en/administration/authstore_procs.html
