OpenSSL installation on microsoft windows server 2016

1) Download OpenSSL from
2) runs cmd under Administrator
3) cd to the C:\Path-openSSL-installation folder
4) set OPPENSSL_CONF=C:\OpenSSL\bin\openssl.conf (the path should be set without the quotes “”) – this files contains the config settings for the crs
5) generate a new private key and a crs request for the Certificate Authority
openssl req -new -nodes -keyout hostname.2016.key -out hostname.2016-server.csr -newkey rsa:2048
6) check the csr that was generated at CSR check
7) Submit the csr to the CA and get the certificate in order to copy to the server
8) convert to pem openssl pkcs7 -inform DER -outform PEM -in certificate.p7b -print_certs -out hostname.2016.cert.chain.pem
or openssl x509 -in mycert.crt -out mycert.pem -outform PEM
9) copy file to the apache, nginx, stunnel appropriate folders and adjust the config file of the web server
ex: apache

DocumentRoot /var/www/html2
SSLEngine on
SSLCertificateFile /path/to/your_domain_name.crt
SSLCertificateKeyFile /path/to/your_private.key
SSLCertificateChainFile /path/to/DigiCertCA.crt

10) restart the webserver

This entry was posted in Windows Server. Bookmark the permalink.

Leave a Reply