[qmailtoaster] Re: STARTTLS + ComodoSSL Free + 2048 Encryption

2014-02-01 Thread Eric Shubert
On 02/01/2014 08:09 AM, Richard Baxant wrote: Has anyone got this to work in qmailtoaster with this brand of SSL at 2048 encryption? I can see that qmail has the clientcert.pem - servercert.pem. I looked at the internals of the file to see the order of the keys. I cannot figure out other than

Re: [qmailtoaster] Re: STARTTLS + ComodoSSL Free + 2048 Encryption

2014-02-01 Thread Richard Baxant
Yes I followed the first part. It gave me the information to cat the files to create the pem. The rest is self-signed certs and I do not want that part. On Sat, Feb 1, 2014 at 10:52 AM, Eric Shubert e...@shubes.net wrote: On 02/01/2014 08:09 AM, Richard Baxant wrote: Has anyone got this to

[qmailtoaster] Re: STARTTLS + ComodoSSL Free + 2048 Encryption

2014-02-01 Thread Eric Shubert
IIRC off the top of my head, you want to cat the .) key (you generated with the csr) .) cert (you received from the ca) .) ca-bundle (you may have received from the ca) to make the .pem file. I could be mistaken on this. Anyone else have thoughts on this? Thanks. -- -Eric 'shubes' On

Re: [qmailtoaster] Re: STARTTLS + ComodoSSL Free + 2048 Encryption

2014-02-01 Thread Eric Broch
Here's my procedure. It works every time. Take special note of #5 below. # 1. Create the key (below). For other than a self-signed cert. use options other than 1c. 1a ) openssl genrsa -out x.key 2048 1b) openssl req -new -key x.key -out x.csr 1c) openssl x509 -req -days 3650 -in x.csr