Koozali.org: home of the SME Server

Obsolete Releases => SME Server 8.x => Topic started by: kruhm on July 29, 2013, 01:36:14 AM

Title: [solved] 2048 bit custom certificiate
Post by: kruhm on July 29, 2013, 01:36:14 AM

Hi Everyone,

I'm renewing my commercial certificate and following the instructions here:
http://wiki.contribs.org/Custom_CA_Certificate

Upon executing, the CSR generated is only 1024 bit and not 2048. The CONFIG file has 2048 set.

Any ideas on generating a correct 2048 CSR?

Thanks in advance,

Title: Re: 2048 bit custom certificiate
Post by: _alex on July 29, 2013, 02:10:20 AM

Code: [Select]

openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr

Title: Re: 2048 bit custom certificiate
Post by: Jáder on August 01, 2013, 12:45:19 PM

That´s odd! I just used same page to generate SSL cert to https://zanella.adv.br and it´s 2048!
You can go to that URL and confirm it!

Jáder

Title: Re: 2048 bit custom certificiate
Post by: kruhm on August 04, 2013, 12:54:36 PM

It looks like if there is a key already, the script uses existing key to generate the CSR. Since the existing key was only 1024 bit, the CSR was only 1024 bit.

-renamed the existing key.
-re-run the script.
-CSR created correctly.

Thanks for response.

Title: Re: 2048 bit custom certificiate
Post by: Jáder on August 04, 2013, 02:34:02 PM

ok. You're welcome.

Maybe we should update doc (wiki) about this!
And please add [Solved] to subject.

Jáder