Passing CSR distinguished-name fields as parameters to OpenSSL

openssl csr
Dustin Oprea picture Dustin Oprea · May 30, 2013 · Viewed 18.4k times · Source

How can you generate a CSR without requiring user input, such as to generate CSRs from within an application?

Answer

Dustin Oprea picture Dustin Oprea · May 30, 2013

Pass the subject via the "-subj" argument:

openssl req -new -key <private key file> -out <CSR output file> -subj "/C=<Country Name>/ST=<State>/L=<Locality Name>/O=<Organization Name>/CN=<Common Name>"

Note that if you want to have OpenSSL build the subject string for you, you can create the CSR as you normally would, and then execute the command to self-sign it. A perfectly formatted subject line will be echoed-out at the top ("subject="):

openssl x509 -req -days 365 -in server.csr -signkey server.pem

Loading 'screen' into random state - done
Signature ok
subject=/C=US/ST=Florida/L=Miami/O=Test Group/CN=testgroup.server5
Getting Private key
...

Related questions

How do you sign a Certificate Signing Request with your Certification Authority?

During my search, I found several ways of signing a SSL Certificate Signing Request: Using the x509 module: openssl x509 -req -days 360 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt Using the ca module: openssl …

Read More
How to convert .csr to .cer (or whatever usable on Windows)

I'm trying to figure out how to install .csr certificate under Windows but probably the only way is to convert it to some other format (maybe with openssl) but I have no idea how. Do you have any suggestion?

Read More
Creating an x509 v3 user certificate by signing CSR

I know how to sign a CSR using openssl, but the result certificate is an x509 v1, and not v3. I'm using the following commands: x509 -req -days 365 -in myCSR.csr -CA myCA.crt -CAkey myCA.key -CAcreateserial -out userCertificate.…

Read More