Date: Wed, 13 Apr 2005 14:05:41 -0400 From: Richard Mcintyre <rem@thecompanyonline.com> To: freebsd-questions@freebsd.org Subject: Re: SSL Certificate question. Message-ID: <425D5F75.7020402@thecompanyonline.com> In-Reply-To: <425D51F6.3090108@thecompanyonline.com> References: <425D51F6.3090108@thecompanyonline.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Okay, so I'm a bit slow on the uptake but I figured out that the PEM1 and PEM2 commands are supposed to be preceeded by set in my shell. I have now generated the new certificate, but how do I get sendmail to recognize it? I have even built sendmail from the src on my local machine. for some reason it's still utilizing the old openssl certificate that I generated over a year ago (even though the actual file was removed before I ran the commands below. Your help is appreciated. ~REM Richard Mcintyre wrote: > All, > > I'm usually just a lurker on this list but I ran into a small problem. > I recently found out that the SSL certificate I created for my > sendmail server has expired. I need to update it. I was following > along with the suggestions at > http://veldt.com/2003/08/smtp-auth-ssl-with-sendmail-freebsd/ but I > ran into a problem, I was hoping I could just generate a new > certificate with the following commands: > > "next, you’ll need to generate certificates for sendmail to use. > mkdir /etc/mail/certs > cd /etc/mail/certs > mktemp /tmp/openssl.XXXXX1 > mktemp /tmp/openssl.XXXXX2 > PEM1='/tmp/openssl.XXXXX1' > PEM2='/tmp/openssl.XXXXX2' > openssl req -newkey rsa:1024 -keyout $PEM1 \ > -nodes -x509 -days 365 -out $PEM2 > cat $PEM1 > sendmail.pem > echo "" >> sendmail.pem > cat $PEM2 >> sendmail.pem > cp $PEM2 ca-bundle.crt > rm $PEM1 $PEM2 > chmod 400 sendmail.pem > chmod 400 ca-bundle.crt > " > > > I ran into some problems around "PEM1='/tmp'openssl.XXXXX1' for some > reason FreeBSD is now seeing this as a command, and is responding > "PEM1=/tmp/openssl.XXXXX1: Command not found." I am certain that these > are the commands I ran the first time (04/12/2004) to create the > certificates, why aren't they working now? > > Thanks for your help... > > tco2# uname -a > FreeBSD tco2.iaminsane.net 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0: Fri > Apr 23 07:02:47 EDT 2004 > rem@tco2.iaminsane.net:/usr/src/sys/i386/compile/REM_0.0.3 i386 > > > ~REM > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?425D5F75.7020402>