Forum Discussion

33boston_223's avatar
33boston_223
Icon for Nimbostratus rankNimbostratus
Oct 22, 2014

Generate CSR SHA-2

Hi all, Does anyone know if the LTM version 10.2.1 HF3 is capable of generating a CSR using SHA-256? I'm not able to find anywhere within the GUI that will allow you to do this.

Thanks!

5 Replies

  • No support for it in the web interface, but you can do it from a bash shell using openssl

     

    openssl req -new -newkey rsa:2048 -nodes -sha256 -out www.mydomain.com.sha256.csr -keyout www.mydomain.key

     

    You can then import the private key via the web interface, and send the CSR to the CA to get your certificate.

     

    I'm not 100% sure 10.2.1 supports SHA-256. One document I found says it was added in 10.1 and another says 10.2.3

     

    • mimlo_61970's avatar
      mimlo_61970
      Icon for Cumulonimbus rankCumulonimbus
      fyi, the above command will prompt you to enter all of the Subject attributes.
    • tejas_176293's avatar
      tejas_176293
      Icon for Nimbostratus rankNimbostratus
      I tried with above command to configure CSR with SHA256 but not able to see the CSR in required format after entering all inputs and get openssl prompt only. Where or by which command I can see CSR? Many Thanks!
    • mimlo_61970's avatar
      mimlo_61970
      Icon for Cumulonimbus rankCumulonimbus
      the csr is written to the file 'www.mydomain.com.sha256.csr', or whatever filename you put here You can view it with 'cat www.mydomain.com.sha256.csr'