Re: [qmailtoaster] servercert.pem/clientcert.pem expired. Generate new?

2006-10-26 Thread Eric \Shubes\
I think it'd be nice to copy the relevant part from the install page and
paste it in the Certificate page. There should be instructions there for
creating a self signed certificate, as well as what's already there.

Thanks, Scott.

Scott M Andrews wrote:
 Found it.
 
 http://wiki.qmailtoaster.com/index.php/Fedora_Core_4_x86_64_QmailToaster_Install
 
 
 
 8. Make a self signed certificate:
 
   cd /etc/pki/tls/certs/
   make stunnel.pem
 
 
   Note: common name should be your FQDN server.your-domain.com
 
 
   mv stunnel.pem /var/qmail/control/servercert.pem 
   chown root:qmail /var/qmail/control/servercert.pem 
   chmod 644 /var/qmail/control/servercert.pem
   /ln -s /var/qmail/control/servercert.pem
 /var/qmail/control/clientcert.pem
 
 
 Cheers anyhow.
 :-)
 
 
 At 03:28 PM 26/10/2006, you wrote:
 Hi All,

 My certificate has expired.  When I installed QT some time ago, I
 remember following the steps to create one, but I can't remember
 exactly what I did.

 At the time, I did not send of the request to a Company like VeriSign,
 etc, and a self signed cert is fine for my needs.

 I followed the steps on the Wiki (minus the RegistryFly step 4 and the
 catting of servercert.crt).

 When I run a test, QT responds -
 454 TLS missing certificate: error:0906D06C:PEM
 routines:PEM_read_bio:no start line (#4.3.0)

 So, I tried replacing with the backup I'd taken of servercert.pm (as
 the clientcert.pm is a symlink) but with the same reqult.

 The permissions are -
 -rw-r--r--  1 root qmail  887 Oct 26 15:22 servercert.pem

 which look to be correct.

 Any assistance would be greatly appreciated - or even a pointer to a
 guide for making and using a self signed cert for QT.  This may be
 handy to add to the Wiki also.

 Cheers!



-- 
-Eric 'shubes'

-
 QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[qmailtoaster] servercert.pem/clientcert.pem expired. Generate new?

2006-10-25 Thread Scott M Andrews

Hi All,

My certificate has expired.  When I installed QT some time ago, I 
remember following the steps to create one, but I can't remember 
exactly what I did.


At the time, I did not send of the request to a Company like 
VeriSign, etc, and a self signed cert is fine for my needs.


I followed the steps on the Wiki (minus the RegistryFly step 4 and 
the catting of servercert.crt).


When I run a test, QT responds -
454 TLS missing certificate: error:0906D06C:PEM 
routines:PEM_read_bio:no start line (#4.3.0)


So, I tried replacing with the backup I'd taken of servercert.pm (as 
the clientcert.pm is a symlink) but with the same reqult.


The permissions are -
-rw-r--r--  1 root qmail  887 Oct 26 15:22 servercert.pem

which look to be correct.

Any assistance would be greatly appreciated - or even a pointer to a 
guide for making and using a self signed cert for QT.  This may be 
handy to add to the Wiki also.


Cheers!


-
QmailToaster hosted by: VR Hosted http://www.vr.org
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [qmailtoaster] servercert.pem/clientcert.pem expired. Generate new?

2006-10-25 Thread Scott M Andrews


Found it.

http://wiki.qmailtoaster.com/index.php/Fedora_Core_4_x86_64_QmailToaster_Install


8. Make a self signed certificate: 
 cd /etc/pki/tls/certs/
 make stunnel.pem


 Note: common name should be your FQDN server.your-domain.com


 mv stunnel.pem /var/qmail/control/servercert.pem 
 chown root:qmail /var/qmail/control/servercert.pem 
 chmod 644 /var/qmail/control/servercert.pem
 /ln -s /var/qmail/control/servercert.pem
/var/qmail/control/clientcert.pem

Cheers anyhow.
:-)

At 03:28 PM 26/10/2006, you wrote:
Hi All,
My certificate has expired. When I installed QT some time ago, I
remember following the steps to create one, but I can't remember exactly
what I did.
At the time, I did not send of the request to a Company like VeriSign,
etc, and a self signed cert is fine for my needs.
I followed the steps on the Wiki (minus the RegistryFly step 4 and the
catting of servercert.crt).
When I run a test, QT responds -
454 TLS missing certificate: error:0906D06C:PEM routines:PEM_read_bio:no
start line (#4.3.0)
So, I tried replacing with the backup I'd taken of servercert.pm (as the
clientcert.pm is a symlink) but with the same reqult.
The permissions are -
-rw-r--r-- 1 root qmail 887 Oct 26 15:22
servercert.pem
which look to be correct.
Any assistance would be greatly appreciated - or even a pointer to a
guide for making and using a self signed cert for QT. This may be
handy to add to the Wiki also.
Cheers!

-
 QmailToaster hosted by: VR Hosted
http://www.vr.org

-
To unsubscribe, e-mail:
[EMAIL PROTECTED]
For additional commands, e-mail:
[EMAIL PROTECTED]