Hello
you can make it on one command line
openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 -keyout
servercert.pem -out servercert.pem
that would make it for 10 years
And voilà
Eric Broch wrote:
Eric S.,
I'd do it after Thanksgiving, but someone would have to give me
instructions.
Eric B.
-----Original Message-----
From: news [mailto:[email protected]] On Behalf Of Eric Shubert
Sent: Wednesday, November 25, 2009 9:57 AM
To: [email protected]
Subject: [qmailtoaster] Re: servercert.pem common name
It'd be nice to have this on the wiki. Anyone care to update it?
Eric Broch wrote:
Athiq,
This is how I do it...in a bash script:
# 1. Create the key.
# 2. Copy the key (mailkey.crt) to /var/qmail/control/servercert.pem
# 3. Restart Qmail.
# 4. Import the key (mailkey.cert) to trusted root server in
# Internet Explorer or Firefox
# on your computer.
# 5. Make sure the name of the server (CN) when creating
# the certificate, whether FQDN
# or IP address, is used in the server information incoming
# and outgoing fields of the mail client.
# 6. Restart the mail client.
openssl genrsa -out x.key 2048
openssl req -new -key x.key -out x.csr
openssl x509 -req -days 3650 -in x.csr -signkey x.key -out x.crt
cat x.crt x.key > mailkey.crt
cp mailkey.crt /var/qmail/control/servercert.pem
rm x.crt
rm x.key
rm x.csr
Eric
<<
-----Original Message-----
From: Athiqur Rahman [mailto:[email protected]]
Sent: Wednesday, November 25, 2009 6:55 AM
To: [email protected]
Subject: [qmailtoaster] servercert.pem common name
Hi,
The common name of my servercert.pem is set to 'localhost'. How to I
change this, or create a new certificate with the common name of my mail
server.
Every time i try to send an email my thunderbird throws up a warning
syaing my smtp name and certificate name are not the same.
thanks,
--Athiq
----------------------------------------------------------------------------
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
