CSR Support

Qmail Open-SSL Web Server

Creating a Certificate Signing Request

  1. Connect to your server.
  1. At the prompt, type:

openssl req -new -nodes -keyout your_domain_name.key -out your_domain_name.csr

This command creates two files: the Private-Key file for the decryption of your SSL Certificate, and a certificate signing request (CSR) file that you will use later to order your certificate.

You will be prompted for information about your organization, beginning with geographic information. There may be default information set already. The city, state, etc. that you enter must represent the correct location of the organization.

You will be prompted for a Common Name (domain name), enter the fully qualified domain name (FQDN) for the site you are securing. If you will be ordering a Wildcard SSL Certificate your common name must start with *. (for example: *.ipsca.com).

We highly recommend that you choose a challenge password to increase security, though it is an optional field.

Your CSR and Key files will be saved to the current directory. Make sure to keep your Private Key file because you will need it when you install the certificate.

  1. Create CSR:

Use a text editor to open the CSR. Copy and paste the entire block of text (including the BEGIN and END tags) into 'CSR' field of the ipsCA Certificate order form.

  1. When creating a CSR you must follow these conventions.

Enter the information to be displayed in the certificate.

The following characters are not accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.,&

Wildcard certificates must start with *. characters

 

 

Distinguished Name Field

Explanation

Example

Country Name

The two-letter ISO abbreviation for your country

US = United States

State or Province Name

The state or province where your organization is located. Can not be abbreviated.

Georgia

City or Locality

The city where your organization is located.

Atlanta

Organization Name

The exact legal name of your organization. Do not abbreviate

IPS S.L.

Organizational Unit

Optional for additional organization information

Marketing

Common Name (Server Host Name)

The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.

If you intend to secure the URL https://secure.yourURL.com, then your CSR's Server Hostname must be secure.yourURL.com

Server Admin.'s email address

Your email address

abc@yourURL.com

 
 
  1. Submit your CSR to IPSCA.  


CSR installation

 


Installing a Server Certificate using Qmail Open-SSL Web Server

Step one: Save the Certificate

  1. IPSCA will send your Certificate by e-mail. You will also require an intermediate certificate available here ipsCACLASEA1.crt. Each certificate will look something like the following: 

          -----BEGIN CERTIFICATE-----
      JIEBSDSCEXoCHQEwLQMJSoZILvoNVQECSQAwcSETMRkOAMUTBhMuVrM
      mIoAnBdNVBAoTF1JTQSBEYXRhIFNlY3VyaXR5LCBJbmMuMRwwGgYDVQ 
      QLExNQZXJzb25hIENlcnRpZmljYXRlMSQwIgYDVQQDExtPcGVuIE1hc
      mtldCBUZXN0IFNlcnZlciAxMTAwHhcNOTUwNzE5MjAyNzMwWhcNOTYw
      NTE0MjAyOTEwWjBzMQswCQYDVQQGEwJVUzEgMB4GA1UEChMXUlNBIER
      hdGEgU2VjdXJpdHksIEluYy4xHDAaBgNVBAsTE1BlcnNvbmEgQ2VydG
      lmaWNhdGUxJDAiBgNVBAMTG09wZW4gTWFya2V0IFRlc3QgU2VydmVyI
      DExMDBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDU/7lrgR6vkVNX40BA
      q1poGdSmGkD1iN3sEPfSTGxNJXY58XH3JoZ4nrF7mIfvpghNi1taYim
      vhbBPNqYe4yLPAgMBAAEwDQYJKoZIhvcNAQECBQADQQBqyCpws9EaAj
      KKAefuNP+z+8NY8khckgyHN2LLpfhv+iP8m+bF66HNDUlFz8ZrVOu3W 
      QapgLPV90kIskNKXX3a 
      -----END CERTIFICATE-----
  2. Create a combined .pem certificate file. Once you have received your Certificate file from your ipsCA, gather your new certificate files and the private key you generated when you created your CSR. Open a text editor and paste the contents of each key/certificate one after another in the following order:

    1. The Private Key (your_domain_name.key)
    2. The Primary Certificate (your_domain_name.crt)
    3. The Intermediate Certificate (ipsCACLASEA1.crt.)
    4. The Root Certificate (ipsServidores.crt.)

    Make sure that you include the beginning and end tags on each certificate. The result should look like this:

    -----BEGIN RSA PRIVATE KEY-----
    (Your Private Key: your_domain_name.key)
    -----END RSA PRIVATE KEY-----
    -----BEGIN CERTIFICATE-----
    (Your Primary SSL certificate: your_domain_name.crt)
    -----END CERTIFICATE-----
    -----BEGIN CERTIFICATE-----
    (Your Intermediate certificate: ipsCACLASEA1.crt)
    -----END CERTIFICATE-----
    -----BEGIN CERTIFICATE-----
    (Your Root certificate: IPSSERVIDORES.crt)
    -----END CERTIFICATE-----

    Save the combined file as ipsCApack.pem -- This .pem certificate file should be ready for installation on your Qmail Server.

return to the top

© 1996 - 2007 ipsCA, IPS Certification Authority, S.L. all Rights reserved.
Our CPS summarized or complete, CRLs, Root Certificates and legal documents
  can be found in our repository
Read our  Privacy Policy and Terms of Use