Woozle: unsolved

2015-03-24T21:53:30Z

unsolved

← Older revision		Revision as of 21:53, 24 March 2015
Line 9:		Line 9:
	*** <code>openssl ca -config openssl.cnf -policy policy_anything -out newcert.pem -infiles tmp.pem</code>		*** <code>openssl ca -config openssl.cnf -policy policy_anything -out newcert.pem -infiles tmp.pem</code>
	*** I ran all the steps up to that point, but then got errors trying to execute it -- until I repointed openssl.cnf to my pre-existing .crt and .key files.		*** I ran all the steps up to that point, but then got errors trying to execute it -- until I repointed openssl.cnf to my pre-existing .crt and .key files.

			Even after that, though, [[sendmail]] still refused to provide [[STARTTLS]] service (despite giving no error messages when loading the configuration).[[category:unsolved]]

Woozle: Created page with "category:SSL ==About== A self-signed certificate is useful in some circumstances where you need the security of SSL encryption, but do not nee..."

2015-03-24T21:25:39Z

Created page with "category:SSL ==About== A self-signed certificate is useful in some circumstances where you need the security of SSL encryption, but do not nee..."

New page

[[category:SSL]]
==About==
A [[self-signed certificate]] is useful in some circumstances where you need the security of [[Secure Sockets Layer|SSL]] encryption, but do not need certification by a third party.
==How to==
* [http://www.sendmail.org/~ca/email/other/cagreg.html Very brief introduction to create a CA and a CERT]
** If <code>/usr/local/openssl/openssl.cnf.sample</code> does not exist on your system, you can get a copy from [http://web.mit.edu/crypto/openssl.cnf MIT].
** What needs to be changed is mainly the file locations under <code>[ CA_default ]</code>. They seem to presume that you will be executing commands from ''outside'' the CA folder, which doesn't work.
** If you've already got a .key (private key file) and a .crt (certificate file) generated from that key, it ''looks'' like you can configure openssl.cnf to point to them and then skip straight to the penultimate command:
*** <code>openssl ca -config openssl.cnf -policy policy_anything -out newcert.pem -infiles tmp.pem</code>
*** I ran all the steps up to that point, but then got errors trying to execute it -- until I repointed openssl.cnf to my pre-existing .crt and .key files.

self-signed certificate - Revision history

Woozle: unsolved

Woozle: Created page with "category:SSL ==About== A self-signed certificate is useful in some circumstances where you need the security of SSL encryption, but do not nee..."