SSL 247 are authorised strategic resellers of Verisign,GlobalSign, Geotrust and RapidSSL products

Apache + Raven

Follow these instructions to generate a CSR for your Web site. When you have completed this process, you will have a CSR ready to submit that can be generated into a SSL Security Certificate.

Note: The CertificateSigning Request (CSR) instructions are followed by key pair backup instructions.

Enter Server Name (Common Name).

Select size of encryption key (1024 recommended).

*Note: The encryption key size (512 bit, 1024 bit) has nothing to do with the actual session key (128/256 bit, 40 bit).

Enter pass phrase to encrypt key.

Warning: If you lose the passphrase, you must purchase another certificate.

See the certificate replacement policy at the bottom of these instructions.

Choose the server to request a certificate for:
Version 1.5.1 select NO to send the CSR to us
Version 1.5 select YES to send the CSR to us

Note: If you select no, a required field will be missing and the CSR will be invalid.

Version 1.5x enter the same pass phrase entered generating the private key above.

Enter the information to be displayed in the certificate.

Distinguished Name Fields	Explanation	Example
Country Name	The two-letter ISO abbreviation for your country. Please click here for the list of official ISO country codes.	US = United States GB = United Kingdom
State or Province Name	The state or province where your organization is located. Can not be abbreviated.	Georgia
City or Locality	The city where your organization is located.	Atlanta
Company (Organization) Name	The exact legal name of your organization. Do not abbreviate your organization name.	My Company, Inc
Organizational Unit	Optional for additional organizational information.	Marketing
Common Name (Server Host Name)	The fully qualified domain name for your web server. You will get a certificate name check warning if this is not an exact match.	If you intend to secure the URL https://secure.mydomain.com, then your CSR's Server Hostname must be secure.mydomain.com
Server Administration email address (if applicable)	Your email address	abc@mydomain.com

When creating a CSR you must follow these conventions. Enter the information to be displayed in the certificate. The following characters can not be accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.,&

Send the CSR to your email address or display the CSR on your console.

Exit RavenCTL

While waiting for your certificate, you can use the self-signed certificate generated above.

**** Note: If you would like to verify the contents of the CSR, use the following command: $ openssl req -noout -text -in server.csr

Create a backup copy of the private key.

Backup the servername.key file from the raven/module/pki/keys directory to a secure location and remember the PEM passphrase (step 3).

**** Note: To view the contents of the private key, use the following command: $ openssl rsa -noout -text -in servername.key

You are now ready to submit your CSR for the certificate you wish to install:

• FreeSSL
• RapidSSL™
• RapidSSL Pro™
• RapidSSL Pro Wildcard™
• GeoTrust QuickSSL Premium™
• Geotrust True BusinessID®
• Geotrust True BusinessID® Wildcard
• GeoTrust PowerServer ID™
• GlobalSign Domain ServerSign™
• GlobalSign Domain ServerSign™ Wildcard
• GlobalSign Extended ServerSign™
• GlobalSign Organization ServerSign™
• GlobalSign Organization ServerSign™ with IP
• GlobalSign Organization ServerSign™ Wildcard
• GlobalSign Organization ServerSign™ with SAN
• VeriSign Secure Site
• VeriSign Secure Site Pro
• VeriSign Secure Site Pro with EV