Found it.

http://wiki.qmailtoaster.com/index.php/Fedora_Core_4_x86_64_QmailToaster_Install


8. Make a self signed certificate:

  cd /etc/pki/tls/certs/
  make stunnel.pem

  Note: common name should be your FQDN server.your-domain.com


  mv stunnel.pem /var/qmail/control/servercert.pem 
  chown root:qmail /var/qmail/control/servercert.pem 
  chmod 644 /var/qmail/control/servercert.pem
  /ln -s /var/qmail/control/servercert.pem
/var/qmail/control/clientcert.pem

Cheers anyhow.
:-)


At 03:28 PM 26/10/2006, you wrote:
Hi All,

My certificate has expired.  When I installed QT some time ago, I remember following the steps to create one, but I can't remember exactly what I did.

At the time, I did not send of the request to a Company like VeriSign, etc, and a self signed cert is fine for my needs.

I followed the steps on the Wiki (minus the RegistryFly step 4 and the catting of servercert.crt).

When I run a test, QT responds -
454 TLS missing certificate: error:0906D06C:PEM routines:PEM_read_bio:no start line (#4.3.0)

So, I tried replacing with the backup I'd taken of servercert.pm (as the clientcert.pm is a symlink) but with the same reqult.

The permissions are -
-rw-r--r--  1 root qmail  887 Oct 26 15:22 servercert.pem

which look to be correct.

Any assistance would be greatly appreciated - or even a pointer to a guide for making and using a self signed cert for QT.  This may be handy to add to the Wiki also.

Cheers!


---------------------------------------------------------------------
    QmailToaster hosted by: VR Hosted <http://www.vr.org >
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to