CSR 是否独特？
我正在创建一个网页来获取敏感的客户信息，并希望该信息位于 SSL 安全页面上。
CA 要求我提供 CSR。
我计划在服务器上安装 OpenSSL 并创建其中一个。
这是否意味着我创建 CSR 的服务器将与我必须安装他们提供给我的证书的服务器相同，或者我可以将其安装在其他地方吗？
他们提供的证书与我创建的 CSR 有什么联系？
感谢您的任何帮助。
I'm creating a webpage to take sensitive customer information and wish this to be on an SSL secured page.
Ive been asked by a CA to provide a CSR.
I was planning to install OpenSSL on a server and create one of these.
Does this mean that the server I create the CSR on will be the same one I have to install the certificate they provide me or can I install it somewhere else?
What links the certificate they provide to the CSR I create?
Thanks for any help.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
当生成密钥对（公共和私有）时（例如使用 OpenSSL），也会生成 CSR。 CSR 是一种包装器，其中包含您的组织信息和公钥。
这也是 CA 将在其中签名的部分。
一旦您收到签名证书（在向 VeriSign、GoDaddy 等公司付款后），您应该将签名证书与最初生成的私钥重新配对，并在您希望保护内容传输的应用程序中一起工作。例如网络服务器。
密钥对和生成的 CSR 文件通常可以移动到其他主机/服务器。只有在密钥对生成机制涉及硬件（例如某些 nCipher 设备）的情况下，才不允许您移动到其他计算机。
When a key pair (public and private) is generated, such as with OpenSSL, a CSR is also generated. The CSR is sort of a wrapper that contains your Organization info with the public key.
This is also the part of the pair where the CA will sign upon.
Once you have received the signed certificate (after paying companies like VeriSign, GoDaddy) you should be pairing the signed certificate back together with the initially generated private key and together they work in the app in which you wish to secure content transmission with. E.g. Web servers.
The key pair, and CSR files generated usually CAN BE moved to other hosts/servers. Only in cases where the key pair generation mechanism involves hardware (such as some nCipher devices) will you not be allowed to move to other machine.
证书签名请求 (CSR) 在哪里生成并不重要。
只要确保您保留私钥即可。否则，颁发的证书将毫无用处，因为它是将您的 CSR“链接”到证书的密钥。
It doesn't matter, where the certificate signing request (CSR) is being generated.
Just make sure, you keep the private key. Otherwise the issued certificate will be useless, as it's the key that "links" your CSR to the certificate.