Xbase++ Requires Chilkat v11.0.0+

Generate CSR with Uncommon Fields

See more CSR Examples

Demonstrates how to generate a new RSA key and a Certificate Signing Request (CSR) for this:

csr.common.name=Admin forInformation-MainShop
csr.serial.number=1-XYZ|2-2.0|3-999695
csr.organization.identifier=990099994100099
csr.organization.unit.name=9999910000
csr.organization.name=9999910000
csr.country.name=SA
csr.invoice.type=1100
csr.location.address=King Fahed Road
csr.industry.business.category=MainOffice

Xbase++

LOCAL nSuccess
LOCAL oRsa
LOCAL oPrivKey
LOCAL oCsr
LOCAL cPemStr
LOCAL oFac

nSuccess := 0

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  First generate an RSA private key.
oRsa := CreateObject("Chilkat.Rsa")

//  Generate a random 2048-bit RSA key.
oPrivKey := CreateObject("Chilkat.PrivateKey")
nSuccess := oRsa:GenKey(2048, oPrivKey)
IF (nSuccess == 0)
    ? oRsa:LastErrorText
    oRsa:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

//  Create the CSR object and set properties.
oCsr := CreateObject("Chilkat.Csr")

oCsr:CommonName := "Admin forInformation-MainShop"

//  Country Name (2 letter code)
oCsr:Country := "SA"

//  Organization Name (eg, company)
oCsr:Company := "9999910000"

//  Organizational Unit Name (eg, secion/division)
oCsr:CompanyDivision := "9999910000"

//  See https://www.alvestrand.no/objectid/2.5.4.html for OIDs for the following fields:

//  csr.serial.number=1-XYZ|2-2.0|3-999695
//  2.5.4.5 - id-at-serialNumber 
oCsr:SetSubjectField("2.5.4.5", "1-XYZ|2-2.0|3-999695", "UTF8String")

//  csr.organization.identifier=990099994100099
//  2.5.4.45 - id-at-uniqueIdentifier   Don't know if this is correct.
oCsr:SetSubjectField("2.5.4.45", "1100", "UTF8String")

//  csr.invoice.type=1100
//  Don't know what this OID would be...
oCsr:SetSubjectField("2.5.4.99", "1100", "UTF8String")

//  csr.location.address=King Fahed Road
//  2.5.4.9 - id-at-streetAddress 
oCsr:SetSubjectField("2.5.4.9", "King Fahed Road", "UTF8String")

//  csr.industry.business.category=MainOffice
//  2.5.4.15 - id-at-businessCategory 
oCsr:SetSubjectField("2.5.4.15", "MainOffice", "UTF8String")

//  Create the CSR using the private key.
cPemStr := oCsr:GenCsrPem(oPrivKey)
IF (oCsr:LastMethodSuccess != 1)
    ? oCsr:LastErrorText
    oRsa:destroy()
    oPrivKey:destroy()
    oCsr:destroy()
    RETURN
ENDIF

//  Save the private key and CSR to a files.
oPrivKey:SavePkcs8EncryptedPemFile("password", "qa_output/privKey1.pem")

oFac := CreateObject("Chilkat.FileAccess")
oFac:WriteEntireTextFile("qa_output/csr1.pem", cPemStr, "utf-8", 0)

//  Show the CSR.
? cPemStr

//  Sample output:
//  The CSR PEM can be checked here:
//  https://www.networking4all.com/en/support/tools/csr+check/
//  Copy-and-paste the PEM into the online CSR Decoding / CSR Verification form

//  	-----BEGIN CERTIFICATE REQUEST-----
//  	MIIC6jCCAdICAQAwgaQxITAfBgNVBAMMGG15c3ViZG9tYWluLm15ZG9tYWluLmNv
//  ...
//  ...
//  	hJnYCvjzFz4O9VtT+JtP9ldRHWV3KpZ8ne3AjD+F
//  	-----END CERTIFICATE REQUEST-----

oRsa:destroy()
oPrivKey:destroy()
oCsr:destroy()
oFac:destroy()