...
Open command prompt and navigate to the %JDK_HOME%/bin directory.
Info JDK8 is used in this exercise.
Enter the following command, and then press Enter.
Code Block keytool -keysize 2048 –keystore fiorano.jks –genkey –alias fiorano -keyalg RSA
Tip Use any name for keystore and alias, but they should be carefully . Ensure that the same names and alias are used in the subsequent commands..
- Enter a password for the keystore. The password used in this example is "fioranopass".
- Provide the Organization details as prompted. When prompted for the First Name and Last Name, enter the fully qualified domain name (FQDN), Host Name or URL of the organization for which the certificate is applied for.
For requesting a Wildcard certificate, please add an asterisk * on the left side of the Common Name.
Example: .mydomain.com or www.mydomain.com. This secures all subdomains of the Common Name.Warning All the details provided in this step must be valid. If any of these values are invalid, CA authorities reject the CSR. In this example, fiorano.com is used as the First and Last name, as this certificate is generated to secure RESTful/webservices in fiorano.com.
...
A third-party CA website needs to be used to request an SSL certificate using the CSR generated in the Generating a Certificate Signing Request (CSR) section. Third party CA websites such as http://www.thawte.com/ and https://www.godaddy.com can be used to generate SSL certificates. In this example, a 21-day trial certificate of Thawte.com is generated and used. But this This trial certificate is not recommended for any usageto be used in the actual implementation.
To copy the CSR,
- Open the fiorano.csr file generated in the Generating a Certificate Signing Request (CSR) section.
- Highlight the area from ----BEGIN CERTIFICATE REQUEST to END CERTIFICATE REQUEST---- and press Enter.
- Paste it in the CA website online application to generate SSL certificates.
...