GenerateCSR Method

Generates a new CSR to be sent to a signing authority.

Object Oriented Interface

public function doGenerateCSR($certsubject, $keyname);

Procedural Interface

ipworksssh_certmgr_do_generatecsr($res, $certsubject, $keyname);

Remarks

This method will generate a new Certificate Signing Request (CSR) to be sent to the signing authority. CertSubject specifies the subject of the Certificate Signing Request (CSR). KeyName specifies the name of the keyset (public/private key pair) to be used. If the keyset does not already exist in the Cryptographic Service Provider (CSP), the class will automatically generate one. To set the CSP, use the CSP configuration setting.

NOTE: it is important to remember the name of the keyset that is used when creating a CSR, as keyset must be later re-associated with the certificate after the trust authority has signed the CSR.

The certificate subject is a comma separated list of distinguished name fields and values. For instance "CN=www.server.com, OU=test, C=US, E=support@nsoftware.com". Common fields and their meanings are displayed below.

If a field value contains a comma it must be quoted.

NOTE: This functionality is only available in Windows.