making CSR certificates in Windows (7)

Question

Closely related to How to generate CSR when IIS is not installed.

I also do not have this installed. I am developing a mobile application for iOS, and i am trying to obtain a provisioning file so i can test my app locally. In the process of acquiring this, i am asked for a .csr file, and it instructs me on how to build this on my Mac. Except i don't have a mac, i have a PC, and my company exclusively uses PCs. I need this certificate, without having access to a Mac.

i have seen and used this CSR generator, but it gives me the key and request in long strings of characters, and i need a .csr file to upload to Apple.

Pasting it in notepad and changing the extension to .csr didn't work either :/

Does anyone have any insights on this?

Answer 1

set OPENSSL_CONF=c:\OpenSSL\openssl.cnf

if saved in c:\openssl

You can download this example fileopenssl-dem-server-cert-thvs.cnf

rename openssl

ren cert-thvs.cnf openssl.cnf

Answer 2

You can install OpenSSL for windows and generate CSR file with this command:

openssl req -nodes -newkey rsa:4096 -keyout private_key.key -out cer_sign_request.csr

You'll be asked for a few questions, I think you can just ignore them (press ENTER).

This will generate a private key (such in keychain access) and a certification signing request as csr file.

Answer 3

For those who want an easy to use graphical interface, Digicert has a "Digicert Utility" that is pretty solid. You can use it to create a CSR. It doesnt give you back a private key, so you need to import your self signed or CA certificate to complete the installation of the certificate. Once installed, you can export it as a pfx or crt/key bundle.