User`s guide

Make a Certificate Request
To make new certificates, first, make a certificate request.
1. Enter:
# cd /work/openssl-0.9.7c/CA
2. Run the following commands. It is assumed that the sample configuration
file, openssl.conf.digi, is being used.
# openssl genrsa -out key.pem 1024
# openssl req -new -key key.pem -out req.pem
3. Use the configuration from /usr/share/ssl/openssl.cnf.
A prompt is displayed to enter information that will be incorporated into the
certificate request.
There are many fields, but some can be left blank and some fields have
default values. Entering . leaves the field blank.
4. Enter text for a field call Distinguished Name or a DN.
----- ; CA's Information
Country Name (2 letter code) [AU]: US
State or Province Name (full name) [Your-State]: Minnesota
Locality Name (e.g., city) []: Minneapolis
Organization Name (e.g., company): Digi International
Organizational Unit Name (e.g., section) [](Enter)
Common Name (e.g., YOUR name or your server’s hostname) []: Digi
Passport
Email Address []:(Enter)
5. Enter the following 'extra' attributes to be sent with the certificate request:
A challenge password []:(Press Enter - Do not enter any other
characters)
An optional company name []:(Press Enter - Do not enter any other
characters)