This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
build:security [2008/02/11 02:39] 4.245.76.22 |
build:security [2008/02/11 02:52] (current) 4.245.76.22 |
||
|---|---|---|---|
| Line 34: | Line 34: | ||
| ===== SSL Key Generation - Manual Method ===== | ===== SSL Key Generation - Manual Method ===== | ||
| - | ** This entire section is duplicated below in the [[#openssl-gencrt_script|SSL Key Generation - Script Method]] section. Do one or the other, not both.** | + | ** This entire section is duplicated below in the [[#ssl_key_generation_-_script_method|SSL Key Generation - Script Method]] section. Do one or the other, not both.** |
| This is repeated for each application that needs it. | This is repeated for each application that needs it. | ||
| Line 66: | Line 66: | ||
| </code> | </code> | ||
| - | ===== openssl-gencrt script ===== | + | ===== SSL Key Generation - Script Method ===== |
| - | The above commands are in openssl-gencrt to simplify cert creation: | + | |
| - | * Launch openssl-keygen with the desired Certificate Name as an argument | + | **This entire section is duplicated above in the [[#ssl_key_generation_-_manual_method|SSL Key Generation - Script Method]] section. Do one or the other, not both.** |
| + | This is repeated for each application that needs it. | ||
| + | |||
| + | The above commands are in a script named ''openssl-gencrt'' to simplify certificate creation: | ||
| + | |||
| + | * Copy ''/usr/local/sbin/openssl-gencrt'' from another system if not already done. | ||
| + | |||
| + | * Launch ''openssl-keygen'' with the desired Certificate Name as an argument | ||
| <code rootshell> | <code rootshell> | ||
| - | openssl-gencrt <Certificate Name>e | + | openssl-gencrt <name> |
| </code> | </code> | ||
| * The defaults for SLUUG are provided - a <cr> will accept them; only the common name is required to be entered. | * The defaults for SLUUG are provided - a <cr> will accept them; only the common name is required to be entered. | ||
| * Defaults may be overridden if required | * Defaults may be overridden if required | ||
| - | * NOTE: A passphrase is requifor the key - it is removed in the second step | + | * NOTE: A passphrase is required for the key - it is removed in the second step |
| ===== Defaults ===== | ===== Defaults ===== | ||