making CSR certificates in Windows (7)

Question

Closely related to How to generate CSR when IIS is not installed.

I also do not have this installed. I am developing a mobile application for iOS, and i am trying t

Answer 1

You can install OpenSSL for windows and generate CSR file with this command:

openssl req -nodes -newkey rsa:2048 -keyout private_key.key -out cer_sign_request.csr

You'll be asked for a few questions which are optional (press ENTER).

This will generate a private key (such in keychain access) and a certification signing request as csr file.

Answer 2

set OPENSSL_CONF=c:\OpenSSL\openssl.cnf

if saved in c:\openssl

You can download this example fileopenssl-dem-server-cert-thvs.cnf

rename openssl

ren cert-thvs.cnf openssl.cnf

Answer 3

For those who want an easy to use graphical interface, Digicert has a "Digicert Utility" that is pretty solid. You can use it to create a CSR. It doesnt give you back a private key, so you need to import your self signed or CA certificate to complete the installation of the certificate. Once installed, you can export it as a pfx or crt/key bundle.