Re: update-ca-certificates

2023-12-14 Thread Linux-Fan
Pocket writes: On Dec 14, 2023, at 2:23 PM, Linux-Fan wrote: > Pocket writes: [...] > > Should the suffix of the file be .pem as the certs that are referenced by > > the conf file seem to be in PEM format? > > Stick to what the program expects and use .crt Ok what format DER, PEM or some

Re: update-ca-certificates

2023-12-14 Thread Pocket
wrote: >>>>> What formats does certs need to be to work with update-ca-certificates? >>>>> >>>>> PEM or DER? >>>> PEM >>> Well lets look at man update-ca-certificates, shall we? >>> >>> "Certificates must have a

Re: update-ca-certificates

2023-12-14 Thread Linux-Fan
Pocket writes: On 12/14/23 08:11, Henning Follmann wrote: On Wed, Dec 13, 2023 at 09:47:41PM -0500, Jeffrey Walton wrote: On Wed, Dec 13, 2023 at 7:55 PM Pocket wrote: What formats does certs need to be to work with update-ca-certificates? PEM or DER? PEM Well lets look at man update-ca

Re: update-ca-certificates

2023-12-14 Thread Pocket
On 12/14/23 08:11, Henning Follmann wrote: On Wed, Dec 13, 2023 at 09:47:41PM -0500, Jeffrey Walton wrote: On Wed, Dec 13, 2023 at 7:55 PM Pocket wrote: What formats does certs need to be to work with update-ca-certificates? PEM or DER? PEM Well lets look at man update-ca-certificates

Re: update-ca-certificates

2023-12-14 Thread Henning Follmann
On Wed, Dec 13, 2023 at 09:47:41PM -0500, Jeffrey Walton wrote: > On Wed, Dec 13, 2023 at 7:55 PM Pocket wrote: > > > > What formats does certs need to be to work with update-ca-certificates? > > > > PEM or DER? > > PEM Well lets look at man update-ca-certificat

letsencrypt certs for disconnected hosts (Was Re: update-ca-certificates)

2023-12-14 Thread Andy Smith
Hello, On Wed, Dec 13, 2023 at 07:50:00PM -0700, Charles Curley wrote: > On Thu, 14 Dec 2023 09:34:37 +0800 > jeremy ardley wrote: > > > You don't have to be your own CA. It's very easy to use letsencrypt > > to generate valid certificates for hosts even if they are not > > directly connected

Re: update-ca-certificates

2023-12-14 Thread Jeffrey Walton
On Wed, Dec 13, 2023 at 10:52 PM Jeffrey Walton wrote: > > On Wed, Dec 13, 2023 at 9:58 PM Pocket wrote: > > > > On 12/13/23 21:47, Jeffrey Walton wrote: > > > On Wed, Dec 13, 2023 at 7:55 PM Pocket wrote: > > >> What formats does certs need to

Re: update-ca-certificates

2023-12-13 Thread Jeffrey Walton
On Wed, Dec 13, 2023 at 9:58 PM Pocket wrote: > > On 12/13/23 21:47, Jeffrey Walton wrote: > > On Wed, Dec 13, 2023 at 7:55 PM Pocket wrote: > >> What formats does certs need to be to work with update-ca-certificates? > >> > >> PEM or DER? > > PEM

Re: update-ca-certificates

2023-12-13 Thread Pocket
On 12/13/23 21:50, Charles Curley wrote: On Thu, 14 Dec 2023 09:34:37 +0800 jeremy ardley wrote: You don't have to be your own CA. It's very easy to use letsencrypt to generate valid certificates for hosts even if they are not directly connected to the internet. Oooh, is there a writeup

Re: update-ca-certificates

2023-12-13 Thread Pocket
On 12/13/23 21:47, Jeffrey Walton wrote: On Wed, Dec 13, 2023 at 7:55 PM Pocket wrote: What formats does certs need to be to work with update-ca-certificates? PEM or DER? PEM Ok since I am using an intermediate cert to sign, I am creating a combined PEM with the root CA

Re: update-ca-certificates

2023-12-13 Thread Charles Curley
On Thu, 14 Dec 2023 09:34:37 +0800 jeremy ardley wrote: > You don't have to be your own CA. It's very easy to use letsencrypt > to generate valid certificates for hosts even if they are not > directly connected to the internet. Oooh, is there a writeup somewhere on how to do that? The last time

Re: update-ca-certificates

2023-12-13 Thread Jeffrey Walton
On Wed, Dec 13, 2023 at 7:55 PM Pocket wrote: > > What formats does certs need to be to work with update-ca-certificates? > > PEM or DER? PEM > I have just finished writing some scripts to generate certs for my email > server and nginx server. > > [...] > Will pem f

Re: update-ca-certificates

2023-12-13 Thread Pocket
On 12/13/23 20:25, Roberto C. Sánchez wrote: On Wed, Dec 13, 2023 at 07:54:45PM -0500, Pocket wrote: What formats does certs need to be to work with update-ca-certificates? PEM or DER? I have just finished writing some scripts to generate certs for my email server and nginx server

Re: update-ca-certificates

2023-12-13 Thread Pocket
On 12/13/23 20:34, jeremy ardley wrote: On 14/12/23 08:54, Pocket wrote: I have just finished writing some scripts to generate certs for my email server and nginx server. The scripts allow me to become my own CA. You don't have to be your own CA. It's very easy to use letsencrypt to

Re: update-ca-certificates

2023-12-13 Thread jeremy ardley
On 14/12/23 08:54, Pocket wrote: I have just finished writing some scripts to generate certs for my email server and nginx server. The scripts allow me to become my own CA. You don't have to be your own CA. It's very easy to use letsencrypt to generate valid certificates for hosts

Re: update-ca-certificates

2023-12-13 Thread Roberto C . Sánchez
On Wed, Dec 13, 2023 at 07:54:45PM -0500, Pocket wrote: > What formats does certs need to be to work with update-ca-certificates? > > PEM or DER? > > I have just finished writing some scripts to generate certs for my email > server and nginx server. > > The scripts allo

update-ca-certificates

2023-12-13 Thread Pocket
What formats does certs need to be to work with update-ca-certificates? PEM or DER? I have just finished writing some scripts to generate certs for my email server and nginx server. The scripts allow me to become my own CA. The man page states that the cert needs to have a suffix of .crt