SSL证书请求文件(CSR)生成指南 - Oracle Wallet Manager

重要注意事项 An Important Note Before You Start

在生成CSR文件时同时生成您的私钥，如果您丢了私钥或忘了私钥密码，则颁发证书给您后不能安装成功!您必须重新生成私钥和CSR文件，免费重新颁发新的证书。为了避免此情况的发生，请在生成CSR后一定要备份私钥文件和记住私钥密码，最好是在收到证书之前不要再动服务器。

By far the most common problem users have when going through this process is related to private keys. If you lose or cannot access a private key, you cannot use the certificate we issue to you and will need to request a free reissue. To ensure this never happens, we advise that a backup of the private key file is made and that a note is made of the password that is used to protect the export of the private key.

To generate Private Key and CSR pair in Oracle Wallet Manager, please follow the instructions listed below:

1. From the menu bar, choose 'Operations > Create Certificate Request'

The 'Create Certificate' dialog box appears.

2. Enter the following information in the required fields:

Common Name: Enter the exact host and domain name that you require to secure.

(Example: If you wish to secure www.domain.com, then you need to enter this exact domain name into this field.)

Organizational Unit: Enter the name of the identity's Organizational Unit.

(Example: Finance)

Organization: Enter the name of the identity's Organization.

(Example: XYZ Corporation)

Locality/City: Enter the name of the locality or city in which the identity resides.

State/Province: Enter the full name of the state or province in which the identity resides.

Note: Enter the full State Name, as some Certificate Authorities do not accept two-letter abbreviations.

Country: Choose the drop-down list to view a list of country abbreviations. Select the country in which the Organization is located.

Key Size: Choose the drop-down box to view a list of key sizes to use when creating the public/private key pair.

Advanced: Optional. Choose Advanced to view the Advanced Certificate Request dialog panel. Use this field to edit or customize the identity's distinguished name (DN). For example, you can edit the full state name and locality.

3. Choose 'OK'.

An Oracle Wallet Manager dialog box informs you that a certificate request was successfully created.

You can either copy the certificate request text from the body of this dialog panel and paste it into an e-mail message to send to a certificate authority, or you can export the certificate request to a file.

4. Choose 'OK'. You are returned to the Oracle Wallet Manager main window; the status of the certificate is changed to 'Requested'.

Export CSR into text file for submission to a Certification Authority :

1. From the menu bar, choose 'Operations > Export Certificate Request'

The 'Export Certificate Request' dialog box appears.

2. Enter the file system directory in which you want to save the Certificate Request, or navigate to the directory structure under 'Folders'.

3. In the 'Enter File Name' field, enter a file name to save your Certificate Request.

4. Choose 'OK'. A message at the bottom of the window confirms that the Certificate Request was successfully exported to the file.

You are returned to the Oracle Wallet Manager main window.

测试CSR和把CSR发给WoSign, Start the certificate request process

生成CSR后，建议您自己测试一下生成的CSR文件是否正确，请点击 这里 测试您的CSR文件。请把测试成功的CSR文件发给WoSign即可。请一定不要再动您的服务器，等待证书的颁发。

To submit the CSR to WoSign for processing you should start the certificate enrollment process.