OpenSSL: Generate CSR for Code or Driver Signing Certificate
Print this Article
Last Updated:
June 4, 2015 3:49 PM
When you request a code signing certificate, you need to provide a certificate signing request (CSR) from the computer you use to compile the code.
- Launch OpenSSL. How you do this depends on your operating system:
Operating system To launch OpenSSL Windows See Install OpenSSL (Windows), and then run the following command through cmd
:C:\OpenSSL-Win32\bin\openssl.exeMac OS X Launch Terminal and then run the openssl
command. - Generate the certificate signing request:
req -out CSR.csr -new -newkey rsa:2048 -nodes -keyout privateKey.key
- Enter the following information for each field, and then press enter:
Field What to enter Country code The two-letter International Organization for Standardization (ISO) format country code for where your organization is legally registered State/province Name of state or province where your organization is located — do not abbreviate. Locality Name of the city in which your organization is registered/located — do not abbreviate Organization name The full legal name of your organization Organizational unit (Optional) The name of your department in the organization Common Name The full legal name of your organization Email Address Your email address A challenge password Do not complete this field An optional company name Do not complete this field
OpenSSL creates your certificate signing request (CSR.csr
) in the directory where you installed the application. You'll need to locate it and open it in a text editor to complete the request for your code signing certificate.