SSL: Generate SSL Certificate Request

Sumber: https://vitux.com/how-to-generate-a-certificate-signing-request-csr-on-ubuntu/

Step 1: Generate a private key

sudo openssl genrsa –out domain.key 2048

Step 2: Generate the CSR

sudo openssl req –new –key domain.key –out domain.csr

Alternative Method of generating a CSR

Generate Certificate Signing Request (CSR) dan Private Key sekaligus

sudo openssl req -new -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr

sudo openssl req -new -newkey rsa:2048 -nodes -keyout lms.onnocenter.or.id.key -out lms.onnocenter.or.id.csr
sudo openssl req -new -newkey rsa:2048 -nodes -keyout onnocenter.or.id.key -out onnocenter.or.id.csr

CNAME DNS Authentication

Biasanya penyedia SSL akan meminta kita untuk mengauthentikasi domain kita menggunakan CNAME. Kita perlu menambahkan entry CNAME pada DNS sesuai dengan perintah dari penyedia layanan SSL, misalnya,

_e1a29010855492a.onnocenter.or.id. IN CNAME 2705001641008713.sectigo.com.
_e1a29010855492a.onnocenter.or.id. IN CNAME 2705001641008713.comodoca.com.

Referensi

• https://vitux.com/how-to-generate-a-certificate-signing-request-csr-on-ubuntu/