Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Dec 2004 18:59:03 +0100
From:      "Daniel S. Haischt" <me@daniel.stefan.haischt.name>
To:        dave <dmehler26@woh.rr.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: courier imap keys and self-signed ca signing
Message-ID:  <41C5C167.8040604@daniel.stefan.haischt.name>
In-Reply-To: <000d01c4e5f2$7add5b30$0400a8c0@satellite>
References:  <000d01c4e5f2$7add5b30$0400a8c0@satellite>

next in thread | previous in thread | raw e-mail | index | archive | help
Why don't you read the OpenSSL manual that comes with
your SSL-enabled Apache?

Anyway here's a basic command line example:

generate the pop certificate request:
-------------------------------------

openssl req -config path/to/ur/openssl.cnf \
-newkey rsa:2048 -keyout pop-server-key.pem \
-out pop-server-req.pem

issue the certificate using a existing CA certificate:
------------------------------------------------------

openssl ca -config path/to/ur/openssl.cnf \
-name name-of-ur-ca \
-in pop-server-req.pem -out pop-server-cert.pem

Read your OpenSSL manual as well.

dave schrieb:
> Hello,
>     I've got a 5.3 box that i'm using as a self-signing ca. I want to get
> keys going for all the various protocols i use, http, which i've done, pop
> and imap, and smtp. It's these last three i'm having the headache. I'm using
> postfix as my MTA and courier imap for pop/imap, i know that the latter has
> a program to generate keys but not csr's, i'm not sure how to get keys from
> courier and/or postfix to the ca for signing. I'm probably missing somehing
> very basic, and would appreciate any help.
> Thanks.
> Dave.
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
> 
> !DSPAM:41c5be83339755710121396!
> 
> 

-- 
Mit freundlichen Gruessen / With kind regards

Daniel S. Haischt   | phone:    +49 -7032-992909
Grabenstrasse 11    |           +49 -700-DHAISCHT
                     | fax:      +49 -7032-992910
D-71083 Herrenberg  | fax2mail: +49 -7032-7999738
GERMANY             | cell:     +49 -172-7668936

SIP:   sip:haischt@daniel-s-haischt.biz:5060
email: me@daniel.stefan.haischt.name
web:   http://www.daniel.stefan.haischt.name/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?41C5C167.8040604>