Re: Understanding -x509 option

2012-12-20 Thread Robert Moskowitz
On 12/20/2012 06:52 PM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Robert Moskowitz Sent: Thursday, 20 December, 2012 08:24 Left out response to -nodes option... On 12/20/2012 03:44 AM, Dave Thompson wrote: openssl req -new -nodes -keyout foo-key.pem -out foo-req.

RE: Understanding -x509 option

2012-12-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Robert Moskowitz > Sent: Thursday, 20 December, 2012 08:24 > Left out response to -nodes option... > > On 12/20/2012 03:44 AM, Dave Thompson wrote: > >> openssl req -new -nodes -keyout foo-key.pem -out > foo-req.pem -days 365 > > That comman

Re: Understanding -x509 option

2012-12-20 Thread Robert Moskowitz
Left out response to -nodes option... On 12/20/2012 03:44 AM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Robert Moskowitz Sent: Wednesday, 19 December, 2012 22:24 ... I am trying better to understand ... creating a mailserver (postfix) cert. I am looking at a couple

Re: Understanding -x509 option

2012-12-20 Thread Robert Moskowitz
On 12/20/2012 03:44 AM, Dave Thompson wrote: From: owner-openssl-us...@openssl.org On Behalf Of Robert Moskowitz Sent: Wednesday, 19 December, 2012 22:24 ... I am trying better to understand ... creating a mailserver (postfix) cert. I am looking at a couple templets. The one at postfix.org cre

RE: Understanding -x509 option

2012-12-20 Thread Dave Thompson
> From: owner-openssl-us...@openssl.org On Behalf Of Robert Moskowitz > Sent: Wednesday, 19 December, 2012 22:24 > ... I am trying better to understand ... > creating a mailserver (postfix) cert. > > I am looking at a couple templets. The one at postfix.org creates a > 'unsigned public key cert

Understanding -x509 option

2012-12-19 Thread Robert Moskowitz
I am rather good on theory of x509 certs, but quite short on practice of making them. The few times I did, I used templates, but this time around I am trying better to understand what is being created. Oh, I am creating a mailserver (postfix) cert. I am looking at a couple templets. The one