Lua Requires Chilkat v11.0.0+

Generate CSR with Uncommon Fields

See more CSR Examples

Demonstrates how to generate a new RSA key and a Certificate Signing Request (CSR) for this:

csr.common.name=Admin forInformation-MainShop
csr.serial.number=1-XYZ|2-2.0|3-999695
csr.organization.identifier=990099994100099
csr.organization.unit.name=9999910000
csr.organization.name=9999910000
csr.country.name=SA
csr.invoice.type=1100
csr.location.address=King Fahed Road
csr.industry.business.category=MainOffice

Lua

local chilkat = require("chilkat")

-- This requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- First generate an RSA private key.
local rsa = chilkat.Rsa.new()

-- Generate a random 2048-bit RSA key.
local privKey = chilkat.PrivateKey.new()
local success = rsa:gen_key(2048, privKey)
if not success then
    print(rsa.last_error_text)
    return
end

-- Create the CSR object and set properties.
local csr = chilkat.Csr.new()

csr.common_name = "Admin forInformation-MainShop"

-- Country Name (2 letter code)
csr.country = "SA"

-- Organization Name (eg, company)
csr.company = "9999910000"

-- Organizational Unit Name (eg, secion/division)
csr.company_division = "9999910000"

-- See https://www.alvestrand.no/objectid/2.5.4.html for OIDs for the following fields:

-- csr.serial.number=1-XYZ|2-2.0|3-999695
-- 2.5.4.5 - id-at-serialNumber
csr:set_subject_field("2.5.4.5", "1-XYZ|2-2.0|3-999695", "UTF8String")

-- csr.organization.identifier=990099994100099
-- 2.5.4.45 - id-at-uniqueIdentifier   Don't know if this is correct.
csr:set_subject_field("2.5.4.45", "1100", "UTF8String")

-- csr.invoice.type=1100
-- Don't know what this OID would be...
csr:set_subject_field("2.5.4.99", "1100", "UTF8String")

-- csr.location.address=King Fahed Road
-- 2.5.4.9 - id-at-streetAddress
csr:set_subject_field("2.5.4.9", "King Fahed Road", "UTF8String")

-- csr.industry.business.category=MainOffice
-- 2.5.4.15 - id-at-businessCategory
csr:set_subject_field("2.5.4.15", "MainOffice", "UTF8String")

-- Create the CSR using the private key.
local pemStr = csr:gen_csr_pem(privKey)
if not csr.last_method_success then
    print(csr.last_error_text)
    return
end

-- Save the private key and CSR to a files.
privKey:save_pkcs8_encrypted_pem_file("password", "qa_output/privKey1.pem")

local fac = chilkat.FileAccess.new()
fac:write_entire_text_file("qa_output/csr1.pem", pemStr, "utf-8", false)

-- Show the CSR.
print(pemStr)

-- Sample output:
-- The CSR PEM can be checked here:
-- https://www.networking4all.com/en/support/tools/csr+check/
-- Copy-and-paste the PEM into the online CSR Decoding / CSR Verification form

--     -----BEGIN CERTIFICATE REQUEST-----
--     MIIC6jCCAdICAQAwgaQxITAfBgNVBAMMGG15c3ViZG9tYWluLm15ZG9tYWluLmNv
-- ...
-- ...
--     hJnYCvjzFz4O9VtT+JtP9ldRHWV3KpZ8ne3AjD+F
--     -----END CERTIFICATE REQUEST-----