making CSR certificates in Windows (7)

Question

Closely related to How to generate CSR when IIS is not installed.

I also do not have this installed. I am developing a mobile application for iOS, and i am trying to obtain a provisioning file so i can test my app locally. In the process of acquiring this, i am asked for a .csr file, and it instructs me on how to build this on my Mac. Except i don't have a mac, i have a PC, and my company exclusively uses PCs. I need this certificate, without having access to a Mac.

i have seen and used this CSR generator, but it gives me the key and request in long strings of characters, and i need a .csr file to upload to Apple.

Pasting it in notepad and changing the extension to .csr didn't work either :/

Does anyone have any insights on this?

Solution 1

You can install OpenSSL for windows and generate CSR file with this command:

openssl req -nodes -newkey rsa:2048 -keyout private_key.key -out cer_sign_request.csr

You'll be asked for a few questions which are optional (press ENTER).

This will generate a private key (such in keychain access) and a certification signing request as csr file.

Solution 2

For those who want an easy to use graphical interface, Digicert has a "Digicert Utility" that is pretty solid. You can use it to create a CSR. It doesnt give you back a private key, so you need to import your self signed or CA certificate to complete the installation of the certificate. Once installed, you can export it as a pfx or crt/key bundle.

Comments

[Markus Müller]

Be aware that apple only supports RSA keys with a length of 2048. All others are rejected in the developer portal.

[antont]

Thanks for that note, Apple's info seemed to confirm that 2048 is the right length, and it worked for me now, so edited the answer.