Package: debian-handbook Version: 6.0+20120509 Severity: minor Hello Raphaël, in a reply to my bug report #681690, you wrote:
> On Sun, 15 Jul 2012, Francesco Poli (wintermute) wrote: > > Section 11.1.1. Installing Postfix > > ---------------------------------- > > > > Snake oil certificates have to be replaced by real certificates. > > This is explained in the security box. Good. > > But it is suggested to use easy-rsa, as described in a previous section > > that talks about OpenVPN. > > What about users that do not need to set VPNs up? > > It is a little awkward to suggest them to install openvpn *just* for > > the easy-rsa script... > > Isn't there any similarly easy script to generate SSL certificates > > (without manually issuing all the required openssl commands with > > the appropriate options) in some more general purpose package? > > If there is, I would strongly recommend mentioning it and/or > > explaining how to use it! > > I don't know of anything good. Feel free to file a new bug once you've > found the tool that we should recommend here! Couldn't it be /usr/lib/ssl/misc/CA.pl (from package openssl), as suggested by section 11.7.3.3.1. Configuring the Server [1] for the LDAP server configuration? [1] http://debian-handbook.info/browse/stable/sect.ldap-directory.html Or maybe /usr/lib/ssl/misc/CA.sh (again from package openssl)? I am not sure of the differences between the two (except for the obvious different programming language choice)... Please investigate whether one of these two scripts may be suitable for the purpose... Thanks for your time! Bye. -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
