Creating a CSR for an Astaro Secure Gateway/Sophos UTM:

To create a CSR, you must connect to the ASG via the console. Use your preferred SSH client and connect to the device. The „loginuser“ is sufficient as a user, a root access is not required to create a Certificate Signing Request (CSR).

Make sure you are in the home directory of the loginuser:
cd /home/login

Create a special openvpn.cnf configuration with the following command:
cat /etc/ssl/openssl.cnf | grep -v SUBJECT_ALT_NAME > ./openssl.config

Now create the CSR:
openssl req -config ./openssl.config -new -newkey rsa:2048 -out www.yourdomain.com.csr

You can transfer the now created CSR to your PC via SCP or display it directly. Please copy the content of the CSR as plain text into the web form.