Re: Self-signed certificate doubt

2018-06-29 Thread Miklos Vajna
Hi,

On Thu, Jun 28, 2018 at 10:11:08AM +, Renato Ribeiro 
 wrote:
> > openssl genrsa -out key.pem 2048
> 
> > openssl req -sha256 -new -key key.pem -out csr.pem
> 
> > openssl ca -keyfile private/ca.key.pem -cert ca.cert.pem -extensions 
> > usr_cert -notext -md sha256 -in csr.pem -out cert.pem
> 
> I understand that it's generated a private key then the CSR
> certificate is created and next it's created CA certificate but it's
> already created in the previous steps. Why do this again?

openssl genrsa: generates an RSA private key
openssl req: generates a certificate request
openssl ca: signs the certificate request

The README just documents the bare minimum to get the HTTPS support
going, your question is more about openssl than LibreOffice. ;-)

Regards,

Miklos


signature.asc
Description: Digital signature
___
LibreOffice mailing list
LibreOffice@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice


Self-signed certificate doubt

2018-06-28 Thread Renato Ribeiro
Hi all,


I'm following the step of README file (WSD/README) to generate the new 
self-signed certificate. Could anyone explain me what's the 3 last commands of 
this list means?


> openssl genrsa -out key.pem 2048

> openssl req -sha256 -new -key key.pem -out csr.pem

> openssl ca -keyfile private/ca.key.pem -cert ca.cert.pem -extensions usr_cert 
> -notext -md sha256 -in csr.pem -out cert.pem


I understand that it's generated a private key then the CSR certificate is 
created and next it's created CA certificate but it's already created in the 
previous steps. Why do this again?


Thanks in advance.

Besta Regards
___
LibreOffice mailing list
LibreOffice@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice


Re: Self-signed certificate

2018-05-29 Thread Miklos Vajna
Hi,

On Wed, May 09, 2018 at 03:42:40PM +, Renato Ribeiro 
 wrote:
> I've tried to create a self-signed to access the LOOL application in a web 
> browser but even following all steps of README file 
> (online.git/wsd/README):[cid:8fb534d4-99cd-40e5-9866-07243cdf1e55]
> when I try to access the link on the image below the browser (I tested on 
> Mozilla and Chrome) blocked the page because the certification. When I'm 
> creating the certification I've putting the Common Name as 127.0.0.1 
> (localhost address). I think it's the right way but I don't know. Could 
> anyone help me with this issue?

I guess that's expected, browsers do complain about self-signed certs
and localhost will always have a self-signed cert, no problem with that.

Regards,

Miklos


signature.asc
Description: Digital signature
___
LibreOffice mailing list
LibreOffice@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice