How To Generate a Certificate Signing Request (CSR)  for FileZilla Using OpenSSL?

When you are setting up SSL on your FileZilla server, the first thing you will be asked to do is create a Certificate Signing Request (CSR). The CSR is a small data file that contains your server and organization information that you will be submitting to the Certificate Authority (CA) so that you can get your SSL certificate.

In this tutorial, we will look at the process required to create a CSR for FileZilla using OpenSSL.

Prerequisites to Create a CSR for FileZilla using OpenSSL

FileZilla Server Installed

• First of all, you will have to install and set up the FileZilla Server Software correctly.
• You also have to have access to the directory and terminal of the server to create and manage certificate files.

OpenSSL Installed

• OpenSSL needs to be present on your system. Most Linux systems and macOS come with OpenSSL as a default package.
• Windows, however, might need to be downloaded with OpenSSL manually from the official OpenSSL website.
• Other users also prefer using Git Bash in their Windows operating system.

Terminal or SSH Access

• To access your FileZilla server, you will need to have terminal access. That is, however, assuming you are not accessing from a remote location.
• If you are, you will need to ensure SSH is turned on and you have the proper credentials to access securely.

Server Domain Name (FQDN)

• Have your own FileZilla server’s fully qualified domain name (FQDN) handy when you prepare your CSR.
• Your FQDN will be your Common Name (CN); for example: ftp.example.com or *.example.com in case of wildcards.

Organization Details

• Make sure you have obtained the legal name of your company, department, location, city and state and country code.
• All of these fields need to be filled in correctly while creating the CSR so that their accuracy is crucial for the certificate to be successfully validated.

Administrative Privileges

• In properly creating and saving the key files in your preferred directory, you will require administrator-level privileges on the server.
• The process also prevents unauthorized access, hence allowing a smoother operation in creating the CSR.

Steps to Create a CSR for FileZilla with OpenSSL

Step 1: Log in to your FileZilla Server through SSH.

• You must log into your FileZilla server via SSH. If you’re within a local terminal, simply initiate your command line interface (CLI).
• You will require OpenSSL, which is generally pre-installed in most Linux and Unix operating systems.

Step 2: Execute the OpenSSL Command

Type the following command at the terminal command prompt to generate your private key and CSR file:

openssl req -new -newkey rsa:2048 -nodes -keyout server.key -out server.csr

• server.key: Private key file. You will use it afterwards to install the certificate.
• server.csr: It is a Certificate Signing Request file, which is utilized for requesting the SSL certificate.

The system will start asking you for input.

Step 3: Enter Certificate Details

You will be asked to present this information:

• Common Name (CN) – fully qualified domain name of your server (e.g., ftp.example.com). For Wildcard SSL Certificates, use an asterisk: *.example.com
• Organization Name: Official name of your business or organization.
• Organizational Unit: Your department name (e.g., IT, Security)
• City/Locality: City where your organization is registered.
• State/Province: State or province in which you reside.
• Country: The two-letter country code of your nation (e.g., US or IN).

Fill in any optional fields with blank data or system defaults, but ensure the Common Name is correct.

Step 4: Locate and Maintain the CSR File

When executed, the command will put two files in your working directory:

• server.csr: The certificate you will be submitting to the Certificate Authority.
• server.key: Keep this secure. You will need it when installing SSL.

Open the .csr file in a text editor. Copy everything, including:

—–BEGIN CERTIFICATE REQUEST—–
…Encoded text…
—–END CERTIFICATE REQUEST—–

You should copy the CSR information into your SSL provider order form when you need to.

Step 5: Submit the CSR to your SSL provider

Paste your CSR information in your order request to your SSL provider, minus the header and footer, the —– labeled label, and quotes.

After verification, your SSL certificate files will be provided to you to finalize the installation on Filezilla Server.

Conclusion

Now that you’ve generated your CSR, get your SSL certificate from CheapSSLWEB specialize in the affordable, trusted SSL/TLS Certificates from top brands— such as DigiCert, Comodo, and Sectigo.