Ways to Make SSL Certificates

  • Use Exchange 2007+ CmdLet to create request and certreq to send the request to the domain CA:

New-ExchangeCertificate -GenerateRequest -Path c:\cert.csr -KeySize 2048 -SubjectName “c=gb, s=County, l=City, o=Organisation, ou=IT, cn=*.whatever.co.uk” -DomainName *.whatever.co.uk, whatever.co.uk, servername.internaldomain.local, servername, sites, companyweb, localhost -PrivateKeyExportable $True

certreq –Submit -attrib “CertificateTemplate:webserver”

certreq –Accept –machine C:\cert.cer

  • Use MakeCert.exe from the Windows SDK

C:\>makecert -r -pe -n “CN=www.whatever.co.uk” -b 01/01/2011 -e 01/01/2020 –eku -sr LocalMachine -ss my -sky exchange -sp “Microsoft RSA SChannel Cryptographic Provider” -sy 12 -len 2048 -$ commercial

  • Use OpenSSL

There are plenty of decent tutorials on the web regarding this

Argh – this stuff is just so irritating.

This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s