Generate CSR Instructions: Oracle Wallet Manager
Follow these instructions to generate a Private Key and CSR for your Web site.
- Open a terminal window and set the ORACLE_HOME environment variable.
export ORACLE_HOME=/home/oracle/infra - In the same window, change your directory to $ORACLE_HOME/bin, and start
Oracle Wallet Manager (OWM).
$ cd $ORACLE_HOME/bin
$ owm& - Oracle Wallet Manager is displayed. Select the Wallet menu and click the New... menu option.
- You get a warning that your default wallet directory does not exist. Click Yes to save this wallet.
- The New Wallet window appears. Enter the password for the wallet as
welcome1. Click OK. - The Create Certificate Request window is displayed. When creating a
CSR you must follow these conventions. Enter the information to be
displayed in the certificate. The following characters cannot
be accepted: < > ~ ! @ # $ % ^ / \ ( ) ? , &
CSR Input Fields Field Explanation Example Common Name (CN)
(host name, FQDN, etc.)The fully qualified domain name for your web server. This must be an exact match. If you intend to secure the URL https://www.domain.com, then your CSR's common name must be "www.domain.com".
For https://secure.domain.com it must be "secure.domain.com".
For just https://domain.com it must be just "domain.com".
For https://owa.mailserver.net it must be "owa.mailserver.net".
A Wildcard for https://sub.primary-domain.com must be "*.primary-domain.com". The asterisk must be included for Wildcard CSR's.Organization (O) The exact legal name of your organization. Do not abbreviate your organization name. Metro Realty LLC or Flowers by Jenny Organizational Unit (OU) Section of the organization Sales Division or IT or Marketing City or Locality (L) The city where your organization is legally located. Cannot be abbreviated. Boston State (S) or Province The state or province where your organization is legally located. Cannot be abbreviated. Massachusetts Country (C) The two-letter ISO abbreviation for your country. US, CA, GB, (must be two-letters) Email Any email address. This field is arbitrary but must be filled in. GeoTrust will not use this email address to process your order. user@domain.com Key Bit Length The key bit length has to do with the initial key exchange, not the encryption strength of your certificate. GeoTrust recommends a key bit length of at least 1024 - A confirmation dialog box appears. Click OK.
- In the navigation pane, you see the wallet with a certificate request
that you have just created. Click the node to view the certificate request
generated on the right.
- Save a copy of your CSR by by copying all of the text in the Certificate
Request box or use the Export Certificate Request utility in Oracle
Wallet Manager. The CSR will be needed during the purchase
process. You'll be asked to copy-and-paste
your CSR into a special CSR box.
Below is an example of what your CSR will look like. This is a example only and cannot be used to generate your SSL certificate.-----BEGIN CERTIFICATE REQUEST----- MIIB3zCCAUgCAQAwgZ4xCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdHZW9yZ2lhMRAw DgYDVQQHEwdBdGxhbnRhMREwDwYDVQQKEwhHZW9DZXJ0czEaMBgGA1UECxMRSW5l cm5ldCBNYXJrZXRpbmcxGTAXBgNVBAMTEHd3dy5nZW9jZXJ0cy5jb20xITAfBgkq hkiG9w0BCQEWEmFkbWluQGdlb2NlcnRzLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOB jQAwgYkCgYEA5KOi+RnRzBuBQeFYjrwZg1sfT7zr4L8j0Khuoj621x+lGBmFC76c kGclUIQBmuyp9T9NrNqAjGtEmgdFr6cWLJtgXgi+BaZDLX9BMYF49NuTggNoEUMX crQRAENHb2YthG2SEcF5p98RNcDPzWOA3a4AMvgkxDlDGYUhbcQhnt0CAwEAAaAA MA0GCSqGSIb3DQEBBAUAA4GBAIapt6Tw0BTYUwEAX0/oKvaaN/ghErR85jdW7xOD b1hL0yNfb495A7e/IQyBEP5a/v+QUOtibHS4geiPhH9etAI+DSQmctjbf6dMGJql gCXGwlsTbjPOSmNT+/X2Uvf1BlplwqAMDghEuFHsjshlypz1NEg94ri2K9N1VrBs
+iAv
-----END CERTIFICATE REQUEST-----
These instructions are derived from documentation on the Oracle web site. Learn more about generating an SSL certificate request using Oracle Wallet Manager.
To install your SSL certificate see Install SSL Certificate: Oracle Wallet Manager.
bitscan™