5 ms·

I'd go with 2048 RSA key length, and put the certificate subject straight in the command line: openssl req -nodes -newkey rsa:2048 -keyout www.example.com.20

I'd go with 2048 RSA key length, and put the certificate subject straight in the command line: openssl req -nodes -newkey rsa:2048 -keyout www.example.com.2014.key -out www.example.com.2014.csr -subj "/C=COUNTRY/ST=STATE/L=CITY/O=COMPANY/OU=/CN=www.example.com" I have exactly this in an Ansible playbook https://github.com/tilsammans/playbook https://github.com/tilsammans/playbook (for rails).

zrail 12y ago
The `genrsa` command is generating 2048 bit keys already. I added `-sha256` and `-utf8` based on some other feedback, though. Thanks!
- AlyssaRowan 12y ago
  The "default" in many configs is still actually 1024 bits, which is of course too small.