6 Replies Latest reply: Nov 30, 2012 3:29 PM by ChaseHollow
ChaseHollow Level 1 Level 1 (0 points)

Whenever I paste in the self generated csr code the ssl authority rejects it with a message "csr must include an organization name". Can anyone help? Also, whichever SSL authority I use no-one displays OS X server as a server type

Thanks!


iMAC; Mac Book Pro, Mac OS X (10.6.1)
  • 1. Re: I am trying to buy an SSL certificate.
    Linc Davis Level 10 Level 10 (117,715 points)

    Does the CSR include an organization name?

  • 2. Re: I am trying to buy an SSL certificate.
    ChaseHollow Level 1 Level 1 (0 points)

    Nope. It's just a very long string of numbers and letters. I have carefully looked through it to see if I can spot an organization name and there is none.

  • 3. Re: I am trying to buy an SSL certificate.
    Linc Davis Level 10 Level 10 (117,715 points)

    You can't read the CSR in the form you upload to the CA. It's encrypted. How was it created? Did you provide an organization name?

  • 4. Re: I am trying to buy an SSL certificate.
    ChaseHollow Level 1 Level 1 (0 points)

    I followed this set of steps from the OSX Server help menu:

    Create a self-signed certificate in the Server app

    • Select your server in the sidebar, and then click Settings.
    • Click the Edit button at the right of SSL Certificate.
    • From the Action pop-up menu (looks like a gear), choose Manage Certificates.
    • Click Add (+), and then choose Create a Certificate Identity from the pop-up menu.
    • In the Name field of the Certificate Assistant, enter your server’s fully qualified host name (for example, server.example.com), and then click Continue.
      Leave the other settings unchanged. Identity Type should be Self Signed Root, Certificate Type should be SSL Server, and “Let me override defaults” should be deselected.

    I then followed these next set of functions from the same help source:

    You can obtain a valid signed certificate by using the server’s self-signed certificate to generate a certificate signing request (CSR) file, which you send to a known CA. If your request satisfies the authority, it generates and sends you a signed certificate. There is usually a fee involved with this service.

    • Select your server in the sidebar, and then click Settings.
    • Click the Edit button at the right of SSL Certificate.
    • From the Action pop-up menu (looks like a gear), choose Manage Certificates.
    • In the Manage Certificates pane, select the self-signed certificate you want to use to generate the CSR.
    • From the Action pop-up menu (looks like a gear), choose Generate Certificate Signing Request (CSR).
    • Save the CSR file.
      Some certificate authorities ask you to enter the CSR text in a field on a webpage instead of uploading a file. In that case, you can copy and paste the text to the CA’s website.
    • Upload the CSR file to a CA following the instructions on their website.
      On the CA’s website, look for SSL Certificates.
      You can use the CA of your choice. Here are a few CAs:
  • 5. Re: I am trying to buy an SSL certificate.
    Linc Davis Level 10 Level 10 (117,715 points)

    You will have to enter an organization name in Profile Manager, then create a new self-signed certificate and CSR. See below for details.

     

    Configuring & Using Profile Manager 2 in OS X Mountain Lion Server | Krypted.com

  • 6. Re: I am trying to buy an SSL certificate.
    ChaseHollow Level 1 Level 1 (0 points)

    Thank you. I will try this