Openssl sign a csr file

Learn more. How to sign a client's CSR with openssl? Ask Question. Asked 8 years, 8 months ago. Active 8 years, 7 months ago. Viewed 15k times. I am missing something basic and obvious about signing a client's CSR with openssl command.

Please check your configuration file. Add a comment. Active Oldest Votes. Thanks dbasic. Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. When prompted, sign the certificate, and commit it to the database. You now have both a root CA certificate and a subordinate CA certificate. You can use either one to sign device certificates.

The one you choose must be uploaded to your IoT Hub. The following steps assume that you are using the subordinate CA certificate. Enter a display name in the Certificate Name field, and select the PEM certificate file you created previously. You can simply change the extension when uploading a certificate to prove possession, or you can use the following OpenSSL command:.

Select Save. Your certificate is shown in the certificate list with a status of Unverified. The verification process will prove that you own the certificate. Select Generate Verification Code. For more information, see Prove Possession of a CA certificate. Copy the verification code to the clipboard.

You must set the verification code as the certificate subject. Select the new certificate in the Certificate Details view. To find the PEM file, navigate to the certs folder.

After the certificate uploads, select Verify. The CA certificate status should change to Verified. Provide the Device ID that matches the subject name of your device certificates. If you have any questions, please contact us by email at Support SSL. You can also find answers to many common support questions in our knowledgebase. SSL Support Team. Related How Tos. Create a. View All How Tos. Handle sslcorp. Facebook Twitter Youtube Github. Subscribe to SSL.

Play Video. Subscribe To SSL. What is SSL?