Step 3: Build the signature request

After you create a signature configuration file for your local private key, you can convert this configuration into a signature request file.

To create a signature request file, execute the following command:

openssl req \
  -key LOCAL_PRIVATE_KEY \
  -config SIGNATURE_CONFIG_FILE \
  -new \
  -nodes \
  -days NUMBER_OF_DAYS \
  -out SIG_REQUEST_FILE

Where:

  • LOCAL_PRIVATE_KEY is the path to the node's local private key that you created in Step 1: Create the local private key.
  • SIGNATURE_CONFIG_FILE is the path to the node's file that you created in Step 2: Create the local signature config file.
  • NUMBER_OF_DAYS is the number of days for which the certificate is good. The default is 30.
  • SIG_REQUEST_FILE is the output location for the signature request file that this command creates.

This command creates a *.csr file with the name you specified.

Next Step

1 2 3 NEXT: (4) Sign the request 5