Reference › DXtools › DXcertgen Tool—Generate and Work with Certificates › dxcertgen certreq Command—Create a Certificate Signing Request (CSR)

dxcertgen certreq Command—Create a Certificate Signing Request (CSR)

If you want to use a certificate from another Certificate Authority (CA), you can use DXcertgen to create a Certificate Signing Request (CSR), which you can send to the authority.

This command creates a CSR and a private key. You do not send the private key to the CA.

If the request is successful, the CA will send back a certificate that has been digitally signed with the CA's private key. (You can then use this certificate by using the command dxcertgen certmerge.)

The command dxcertgen certreq stores the CSR in DXHOME/config/ssld/dsaname.csr, and stores the private key in DXHOME/config/ssld/dsaname.key.

The command has the following syntax:

dxcertgen [-D dsaname] [-Z] certreq

-D dsaname

Specifies the DSA for which a CSR will be created. If you do not use this option, DXcertgen will create requests for all DSAs.

-Z algorithm

Specify which signature algorithm to use when generating the certificate signing request, where algorithm is one of the following:

SHA1

(Default) Creates the private key using the SHA-1 algorithm.

SHA224

SHA256

SHA384

SHA512