Comodo SSL 코모도 그룹 한국내 공식 사이트

Note: Key and certificate file names cannot contain spaces and must be compatible with your workstation's operating system. When prompted to either name a key or certificate file or check the name of a key or certificate file, please ensure the names follow these conventions.

Note: The openssl_config.txt file must be in the current working directory. If it is not, you must specify the path to the file. For Windows NT and Windows 2000, the current default working directory is Program Files \SonicWALL Corporation \SonicWALL Configuration Manager, and openssl_config.txt is located there by default.

For Linux, the current working directory is the directory from which you executed OpenSSL. However, the openssl_config.txt file is located in the /etc directory of the root. When you see the openssl_config.txt file name in a listing, you must add "/etc/" before entering it.

To create an unencrypted private key and generate a certificate request from it, enter the following command lines at the prompt:

genrsa -out key.pem 1024
req -new -key key.pem -out req.pem -config openssl_config.txt

The second command must be entered on one line.
To create a self-signed root certificate valid for 30 days, enter the following commands:

genrsa -out key.pem 1024
req -new -x509 -out cert.pem -key key.pem -config openssl_config.txt

The second command must be entered on one line.
You will be prompted for additional information with each of these commands.

Use the create key command to create your key and the create sign command to create a signing request to be authenticated.

Create a key:

Type the create key command at the prompt:
Intel 7110> create key
Key strength (512/1024) [512]:
New keyID [001]: 002
Keypair was created for keyID: 002

Create a Certificate Signing Request:
Intel 7110> create sign 002
You will now be asked to enter information that will be incorporated into your certificate request. The "common name" must be unique. For other fields, you could use default values.

Country code: This is the two-letter ISO abbreviation for your country (for example, GB for the United Kingdom).

State or Province: This is the name of the state or province where your organization's head office is located. Please enter the full name of the state or province.

Locality: This is the name of the city where your organization's head office is located.

Organization: This should be the organization that owns the domain name. Use the legal name under which your organization is registered. Do not use any of the following characters: < > ~ ! @ # $ % ^ * / \ ( ) ?.

Organizational unit: This is normally the name of the department or group that will use the certificate.

Common name: The common name is the "fully qualified domain name," (or FQDN) used for DNS lookups of your server (for example, www.mydomain.com). Browsers use this information to identify your Web site. Some browsers will refuse to establish a secure connection with your site if the server name does not match the common name in the certificate. Please do not include the protocol specifier "http://" or any port numbers or pathnames in the common name. Do not use wildcard characters such as * or ?, and do not use an IP address.

E-mail address: This should be the e-mail address of the administrator responsible for the certificate.

Export the Certificate Signing Request (CSR).

In this example, xmodem is used to send the CSR to a PC connected to the console port.

Intel 7110> export sign webserver
Export protocol: xmodem, uuencode
[ascii]:<Enter>
Use Ctrl-x to kill transmission
Beginning export...
Export successful!
Intel 7110>

To submit the CSR paste it into the field provided in the online request form. Remember to include the "-----BEGIN CERTIFICATE REQUEST-----" and "-----END CERTIFICATE REQUEST-----" lines. The CSR will look something like this:

-----BEGIN CERTIFICATE REQUEST-----
MIIBnDCCAQUACQAwXjELMAkGA1UEBhMCQ0ExEDOABgNVBAgT
B09udGFayW8xEDAOBgNVBAcTB01vbnRyYWwxDDAKBgNVBAoT
………..more text…………
6ytkuJ9YnK84Q8x+pS2bEBDnw0D2MwdOSF1sBb1bcFfkmbpj
N2N+hqrrvA0mcNpAgk8nU=
-----END CERTIFICATE REQUEST-----