Re: need insights with openssl....

2009-11-24 Thread Bernt Hansson

Gary Kline said the following on 2009-11-24 05:53:

guys,

here is the web page for my network guy's cut and paste page.

http://dfwlpiki.dfwlp.org/index.php/Deploying_a_FreeBSD_6.2_Server#Configuring_Mail_Services

	We need to generate SSL keys for the Apache server. 


Have a look at

http://cb.vu/unixtoolbox.xhtml#certs
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


need insights with openssl....

2009-11-23 Thread Gary Kline

guys,

here is the web page for my network guy's cut and paste page.

http://dfwlpiki.dfwlp.org/index.php/Deploying_a_FreeBSD_6.2_Server#Configuring_Mail_Services

We need to generate SSL keys for the Apache server. 

BElow this is a wiki style box is the following trio of
openssl commands.  The second command gives me some error
messages and dies.  Can anybody figure out what I need to do
to get openssl running?


# openssl genrsa -des3 -out server.key 1024
# openssl req -new -key server.key -out server.csr
# openssl x509 -req -days 365 -in /root/server.csr -signkey 
/root/server.key -out /root/server.crt

Then the instructions:

Copy the certs to the destination directory. 

Followed by more commands to cut and paste:

# cp ~/server.key /usr/local/etc/apache22/
# cp ~/server.crt /usr/local/etc/apache22/


One other thing that is confusing is what openssl has to do
with apache.  Pointers to any tutorials or other documentation
would be a huge help.

thanks in advance,

gary





-- 
 Gary Kline  kl...@thought.org  http://www.thought.org  Public Service Unix
http://jottings.thought.org   http://transfinite.thought.org
The 7.31a release of Jottings: http://jottings.thought.org/index.php

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: need insights with openssl....

2009-11-23 Thread Olivier Nicole
   We need to generate SSL keys for the Apache server. 

I usually follow the FAQ of modssl (modssl.org); that's where I found
the most usefull sample of openssl commands. I just cut and paste.

The signing of certificate is not done by me though.

   One other thing that is confusing is what openssl has to do
   with apache.  Pointers to any tutorials or other documentation
   would be a huge help.

If you want Apache to serve encrypted contents (httpS, port 443) then
your Apache server needs a certificate, and you can use openssl to
generate the said certificate.

If you don't plan to server encrupted contents, you don't have to
worry about openssl.

Bests,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org