From owner-freebsd-questions@FreeBSD.ORG Thu Mar 18 01:15:42 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 632C216A4CE for ; Thu, 18 Mar 2004 01:15:42 -0800 (PST) Received: from smtp.infracaninophile.co.uk (smtp.infracaninophile.co.uk [81.2.69.218]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4103943D41 for ; Thu, 18 Mar 2004 01:15:41 -0800 (PST) (envelope-from m.seaman@infracaninophile.co.uk) Received: from happy-idiot-talk.infracaninophile.co.uk (localhost [IPv6:::1]) i2I9FS8w010835 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 18 Mar 2004 09:15:28 GMT (envelope-from matthew@happy-idiot-talk.infracaninophile.co.uk) Received: (from matthew@localhost)id i2I9FSIU010834; Thu, 18 Mar 2004 09:15:28 GMT (envelope-from matthew) Date: Thu, 18 Mar 2004 09:15:28 +0000 From: Matthew Seaman To: albi Message-ID: <20040318091528.GB10030@happy-idiot-talk.infracaninophile.co.uk> Mail-Followup-To: Matthew Seaman , albi , freebsd-questions@freebsd.org References: <200403180024.07519.freeBSD@parel.demon.nl> <20040318003432.5ba24a3f@moonshine.eyfa.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="TakKZr9L6Hm6aLOc" Content-Disposition: inline In-Reply-To: <20040318003432.5ba24a3f@moonshine.eyfa.org> User-Agent: Mutt/1.5.6i X-Spam-Status: No, hits=-4.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on happy-idiot-talk.infracaninophile.co.uk X-Virus-Scanned: clamd / ClamAV version devel-20040316, clamav-milter version 0.67l cc: freebsd-questions@freebsd.org Subject: Re: openSSL certificate key's X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Mar 2004 09:15:42 -0000 --TakKZr9L6Hm6aLOc Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Mar 18, 2004 at 12:34:32AM +0100, albi wrote: > On Thu, 18 Mar 2004 00:24:07 +0100 > Martijn wrote: >=20 > > I was wondering if anyone could tell me how > > I can generate my openSSL certificate key's. >=20 > for apache ? > e.g. in the apache13-modssl port you can try to use : make certificate >=20 > for courier-imap, there are tools included to make a SSL-cert for > pop3-ssl and imap-ssl If you want to make a self-signed certificate, suitable for use with apache, or sendmail or various other programs, there's a neat little (barebones, no explanation) guide at: http://www.sendmail.org/~ca/email/other/cagreg.html You may need to edit newreq.pem to extract the private key from it -- which is pretty obvious how to do just from looking at the file. Cheers, Matthew NB. Verb. Sap. Some applications (*cough* Outlook *cough*) get upset when the OU in the certificate is the same as the OU of your certificate authority. Cheers, Matthew --=20 Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK --TakKZr9L6Hm6aLOc Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) iD8DBQFAWWiwdtESqEQa7a0RArJsAJ41BBqCvgZL1Sm55/ezg1j7UmRXXgCgge2P lh5SdvguJAB1f5iAey/a52I= =qmgR -----END PGP SIGNATURE----- --TakKZr9L6Hm6aLOc--