Lua Requires Chilkat v11.0.0+

Generate Key and Certificate Signing Request (CSR)

See more CSR Examples

Demonstrates how to generate a new RSA key and a Certificate Signing Request (CSR). Lua

local chilkat = require("chilkat")

-- This requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- First generate an RSA private key.
local rsa = chilkat.Rsa.new()

-- Generate a random 2048-bit RSA key.
local privKey = chilkat.PrivateKey.new()
local success = rsa:gen_key(2048, privKey)
if not success then
    print(rsa.last_error_text)
    return
end

-- Create the CSR object and set properties.
local csr = chilkat.Csr.new()

-- Specify the Common Name.  This is the only required property.
-- For SSL/TLS certificates, this would be the domain name.
-- For email certificates this would be the email address.
csr.common_name = "mysubdomain.mydomain.com"

-- Country Name (2 letter code)
csr.country = "GB"

-- State or Province Name (full name)
csr.state = "Yorks"

-- Locality Name (eg, city)
csr.locality = "York"

-- Organization Name (eg, company)
csr.company = "Internet Widgits Pty Ltd"

-- Organizational Unit Name (eg, secion/division)
csr.company_division = "IT"

-- Email address
csr.email_address = "support@mydomain.com"

-- Create the CSR using the private key.
local pemStr = csr:gen_csr_pem(privKey)
if not csr.last_method_success then
    print(csr.last_error_text)
    return
end

-- Save the private key and CSR to a files.
privKey:save_pkcs8_encrypted_pem_file("password", "qa_output/privKey1.pem")

local fac = chilkat.FileAccess.new()
fac:write_entire_text_file("qa_output/csr1.pem", pemStr, "utf-8", false)

-- Show the CSR.
print(pemStr)

-- Sample output:
-- The CSR PEM can be checked here:
-- https://www.networking4all.com/en/support/tools/csr+check/
-- Copy-and-paste the PEM into the online CSR Decoding / CSR Verification form

--     -----BEGIN CERTIFICATE REQUEST-----
--     MIIC6jCCAdICAQAwgaQxITAfBgNVBAMMGG15c3ViZG9tYWluLm15ZG9tYWluLmNv
--     bTELMAkGA1UEBhMCR0IxDjAMBgNVBAgMBVlvcmtzMQ0wCwYDVQQHDARZb3JrMSEw
--     HwYDVQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQxCzAJBgNVBAsMAklUMSMw
--     IQYJKoZIhvcNAQkBFhRzdXBwb3J0QG15ZG9tYWluLmNvbTCCASIwDQYJKoZIhvcN
--     AQEBBQADggEPADCCAQoCggEBALnQ0un/wF8whk+gPuiAlf3qvx14jgAOV6Erm6EB
--     H7WACPCpnKcm/8KP+7uoPiwRQaENhMeCgf45vcivl2p6aAn/spLXyEkXyw2d8wFb
--     YYAGRkiz4Xf7ASJiKuwcOtORz+sSDzgtdfokHfXU1cYeFE2yQhSdLUY5fMn425+g
--     KoEEsRSjSDe6AKru4+4iGNrLKd8pB9IA5/jOE139IkWlB9r5fEPD5bUTsgqXk9eb
--     68O0gc712V2eZK07N24lDmFC4bIMTD4csDWocR5hFHXj7NX7c8sOBDcpEb9mPIk4
--     elxubnhkfnjhOi4J3lDHcT/0ALnbLhf9LnaiKqs+5VcVZvECAwEAAaAAMA0GCSqG
--     SIb3DQEBBQUAA4IBAQC0AETLIcP3foh5nbu2hVFS8uCUNZ5hEIR1eXmYZmZoBQq2
--     26ZAoT4CZwixlggC+n7WvAXJ5Pzxpl4wLV4loTiQzaKPX1w0ERo5ZRwLy0n56oG2
--     6QG+WTViT1C8rlgtVwkCFNOXr0kSSRs8FdaPllqKxK1hxYSL7zwNpumsk39F2cDt
--     vhcekvH0V3BuGrQFm3dKN/0azW6GOod9+Vq4VzSyOe3kp15oxLBsZOFOu/REujcw
--     Tzu2jt1asQKUm60CZ9wNHpYepR0Ww40uP1slbehEaFDa6V8b60/tlHHmBbJ4/fy5
--     hJnYCvjzFz4O9VtT+JtP9ldRHWV3KpZ8ne3AjD+F
--     -----END CERTIFICATE REQUEST-----