How do I obtain a CSR?

[Liz Furber]

I have very little technical knowledge. I have bought an SSL certificate online for our charity's website and regularly receive emails from the CA asking me for the CSR. I have no idea how to get this from Google Cloud Platform. The webpage - https://cloud.google.com/appengine/docs/python/console/using-custom-domains-and-ssl#obtaining_a_certificate - gives the relevant information I am sure, but I am already lost at section 1a. Can anyone help with a step by step guide on how I do this? I bought the certificate in mid December and really need to get on with this. Any help would be amazing. Thank you.

[Barry Hunter]

Well there are online tools like https://csrgenerator.com/

BUT, not recommended to use them. As they are also generating the Private key, which in theory means they may know the server key. This makes your site slightly less secure. 

The idea of running the command yourself on your own computer or server directly, is never have to share the key itself. 

But does need familiarity with Linux/Unix commands to use openssl directly. 

Might be able to do on windows

http://www.entrust.net/knowledge-base/technote.cfm?tn=8924

... would need to make sure you export the key and the csr, as will need them to upload. 

On 24 January 2017 at 13:19, Liz Furber <l...@rippleafrica.org> wrote:

I have very little technical knowledge. I have bought an SSL certificate online for our charity's website and regularly receive emails from the CA asking me for the CSR. I have no idea how to get this from Google Cloud Platform. The webpage - https://cloud.google.com/appengine/docs/python/console/using-custom-domains-and-ssl#obtaining_a_certificate - gives the relevant information I am sure, but I am already lost at section 1a. Can anyone help with a step by step guide on how I do this? I bought the certificate in mid December and really need to get on with this. Any help would be amazing. Thank you.

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscribe@googlegroups.com.
To post to this group, send email to google-appengine@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/39ddddd9-9e83-4fdb-a174-7350b0ebdf38%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Joshua Smith]

Honestly, someone with “very little technical knowledge” should not attempt to work with SSL certificates.

HTTPS is about setting up a secure website and letting the people who use that website know that you are doing things correctly to protect them.

You should find someone who understands SSL (and web security in general) to take care of this for you.

Think of it like trying to repair the airbag on your car by yourself. It’s just a bad idea.

-Joshua

On Jan 24, 2017, at 8:19 AM, Liz Furber <l...@rippleafrica.org> wrote:

I have very little technical knowledge. I have bought an SSL certificate online for our charity's website and regularly receive emails from the CA asking me for the CSR. I have no idea how to get this from Google Cloud Platform. The webpage - https://cloud.google.com/appengine/docs/python/console/using-custom-domains-and-ssl#obtaining_a_certificate - gives the relevant information I am sure, but I am already lost at section 1a. Can anyone help with a step by step guide on how I do this? I bought the certificate in mid December and really need to get on with this. Any help would be amazing. Thank you.

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.

To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.

[Kelly Ingram]

Hi Liz,
This step should be done on your PC/server.  

I downloaded and installed openSSL from here https://www.openssl.org/source/

Once installed you can then run the command lines as per the Google instructions, changing the values accordingly.

Hope that helps.

Kelly

[Liz Furber]

Many thanks, Kelly. I've installed openSSL and run the command lines. The resulting CSR wasn't validated by the CA - but that's another issue! Thanks for your help.