How do I generate an On-Premises certificate signing request for SSL?

Products

• CA Agile Central On Premise (Rally)

Issue/Introduction

Agile Central On-Premise solution is shipped with a default, self-signed SSL certificate. Customers can generate their own certificate, purchase a certificate from a third party vendor, or use the Agile Central certificate that is installed by default. The following commands outline how to generate a SSL certificate from a third party vendor:

Note: These steps are based on the assumption that the openssl command is available on the system used to create the private keys. You do not need to be on the Agile Central machine to do this, but the steps below were created using a Linux machine. The steps may differ on a Windows machine with OpenSSL.

The Apache Web server requires PEM formatted certificates. PKCS7 and DER formats will not work.

 

Environment

Release:
Component: ACPREM

Resolution

openssl genrsa -des3 -out www.mydomain.com.key 1024

 

openssl req -new -key www.mydomain.com.key –out www.mydomain.com.csr

 

cp www.mydomain.com.key www.mydomain.com.key.org

openssl rsa -in www.mydomain.com.key.org -out  www.mydomain.com.key

The SSL certificate that is obtained should be a single root or unchained certificate. This file will used in combination with the key generated in Step 1 to upload to our On-Premises image.

1. Generate a private key:
2. Generate a Certificate Signing Request (this certificate will be used to generate our ssl certificate on the third party's site):
3. Remove the passphrase from the key:
4. Submit your request to your third party vendor.
5. Use the crt file the vendor sends you in combination with the key file you generated to upload to your On-Premise Image.