Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 19 Dec 2004 13:02:47 -0500
From:      Louis LeBlanc <FreeBSD@keyslapper.org>
To:        freebsd-questions@freebsd.org
Subject:   Re: courier imap keys and self-signed ca signing
Message-ID:  <20041219180247.GA33770@keyslapper.org>
In-Reply-To: <000d01c4e5f2$7add5b30$0400a8c0@satellite>
References:  <000d01c4e5f2$7add5b30$0400a8c0@satellite>

next in thread | previous in thread | raw e-mail | index | archive | help
On 12/19/04 12:45 PM, dave sat at the `puter and typed:
> Hello,
>     I've got a 5.3 box that i'm using as a self-signing ca. I want to get
> keys going for all the various protocols i use, http, which i've done, pop
> and imap, and smtp. It's these last three i'm having the headache. I'm using
> postfix as my MTA and courier imap for pop/imap, i know that the latter has
> a program to generate keys but not csr's, i'm not sure how to get keys from
> courier and/or postfix to the ca for signing. I'm probably missing somehing
> very basic, and would appreciate any help.
> Thanks.
> Dave.


Why would you want to use multiple methods?  Just create a single self
signed CA from OpenSSL and use it to sign a single cert for all your
servers.  You could also just use a self signed cert for all of them.

Check out this info:
http://www.openssl.org/docs/apps/x509v3_config.html#Subject_Alternative_Name_

That will tell you about using a single cert for multiple domains if
that is what you need.

Hope this helps.

Lou
-- 
Louis LeBlanc               FreeBSD@keyslapper.org
Fully Funded Hobbyist, KeySlapper Extrordinaire :)
http://www.keyslapper.org                     ԿԬ

After a number of decimal places, nobody gives a damn.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041219180247.GA33770>