Please explain: Creating the TLS/SSL Certificate

Wil Cooley wcooley at nakedape.cc
Fri Aug 13 23:58:06 EDT 2004


On Fri, 2004-08-13 at 18:42, Patrick Ben Koetter wrote:
> * Jacob Friis Larsen <jfl at list.idg.dk> [040811 23:23]:
> > Could someone explain what this does?
> > I found it at 
> > http://www.delouw.ch/linux/Postfix-Cyrus-Web-cyradm-HOWTO/html/cyrus-config.html
> > 
> > Does it create a self signed certificate?
> 
> yupp
> 
> > Is there an easier way on Debian?
> 
> Probably not. Complicated as it may look it is as easy as it can get.
> 
> > 
> > >*Creating the TLS/SSL Certificate*
> > >
> > >If you want to enable Cyrus' TLS/SSL facilities, you have to create a
> > >certificate first. This requires an OpenSSL installation
> > >
> > >openssl req -new -nodes -out req.pem -keyout key.pem  
> 
> This creates your private key.
> 
> > >openssl rsa -in key.pem -out new.key.pem
> > >openssl x509 -in req.pem -out ca-cert -req \
> > >-signkey new.key.pem -days 999 
> 
> This is where you as private CA sign the private key and make it a
> public certificate (new.key.pem)

Is there something to this process that isn't done here?

http://nakedape.cc/wiki/ApplicationNotes/SslNotes

Wil
-- 
Wil Cooley                                 wcooley at nakedape.cc
Naked Ape Consulting                        http://nakedape.cc

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.andrew.cmu.edu/mailman/private/info-cyrus/attachments/20040813/3954d56f/attachment.bin


More information about the Info-cyrus mailing list