You can create a Certificate Signing Request file using the openssl utility or online services.
To create a Certificate Signing Request file using the openssl utility:
[req]
default_bits=2048
prompt=no
default_md=sha256
req_extensions=req_ext
distinguished_name=dn
[dn]
C=<two-letter country code>
ST=<region>
L=<city>
O=<organization name>
OU=<organizational unit name>
emailAddress=<email address of the web server administrator>
CN=<domain name of the Control Node of the cluster>
[req_ext]
subjectAltName=@alt_names
[alt_names]
DNS.1=<domain name of the Control Node of the cluster>
DNS.2=<domain name of the Secondary Node of the cluster>
DNS.3=<domain name of the Secondary Node of the cluster>
openssl genrsa -out key.pem 2048
openssl req -new -sha256 -key key.pem -out request.csr -config request.config
This creates the following files:
Examples of settings in the request.config file
Setting |
Example |
---|---|
C |
|
ST |
|
L |
|
O |
|
OU |
|
|
|
CN |
|
DNS.1 |
|
DNS.<number> |
|