SSLの申請を行うために、CSRファイルを作成します。
server.keyを作成
ファイル生成マスクを「77」に変更し、鍵ペア（server.key）を作成します。
umask 77
openssl genrsa -aes256 2048 >server.key
応答結果
openssl genrsa -aes256 2048 >server.key
# openssl genrsa -aes256 2048 >server.key
Generating RSA private key, 2048 bit long modulus
...................................+++
e is 65537 (0x10001)
Enter pass phrase:（パスワードを入力）
Generating RSA private key, 2048 bit long modulus
...................................+++
e is 65537 (0x10001)
Enter pass phrase:（パスワードを入力）
server.csrを作成
server.keyを元にserver.csrを作成します。
openssl req -new -key server.key -out server.csr -sha256
応答結果
# openssl req -new -key server.key -out server.csr -sha256
Enter pass phrase for server.key:（server.keyのパスワード）
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:（JP）
State or Province Name (full name) []:（都道府県を入力）
Locality Name (eg, city) [Default City]:（市を入力）
Organization Name (eg, company) [Default Company Ltd]:（未入力）
Organizational Unit Name (eg, section) []:（未入力）
Common Name (eg, your name or your server's hostname) []:（ドメイン名を入力）
Email Address []:（未入力）
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:（未入力）
An optional company name []:（未入力）
Enter pass phrase for server.key:（server.keyのパスワード）
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:（JP）
State or Province Name (full name) []:（都道府県を入力）
Locality Name (eg, city) [Default City]:（市を入力）
Organization Name (eg, company) [Default Company Ltd]:（未入力）
Organizational Unit Name (eg, section) []:（未入力）
Common Name (eg, your name or your server's hostname) []:（ドメイン名を入力）
Email Address []:（未入力）
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:（未入力）
An optional company name []:（未入力）
server.csrの確認
server.csrが作成できたか確認する。
vi server.csr
ファイルの中身イメージ
-----BEGIN CERTIFICATE REQUEST-----
：
-----END CERTIFICATE REQUEST-----
以上でCSRファイルの作成が完了です。
：
-----END CERTIFICATE REQUEST-----
