This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
build:security [2008/02/11 02:39] 4.245.76.22 |
build:security [2008/02/11 02:52] (current) 4.245.76.22 |
||
---|---|---|---|
Line 34: | Line 34: | ||
===== SSL Key Generation - Manual Method ===== | ===== SSL Key Generation - Manual Method ===== | ||
- | ** This entire section is duplicated below in the [[#openssl-gencrt_script|SSL Key Generation - Script Method]] section. Do one or the other, not both.** | + | ** This entire section is duplicated below in the [[#ssl_key_generation_-_script_method|SSL Key Generation - Script Method]] section. Do one or the other, not both.** |
This is repeated for each application that needs it. | This is repeated for each application that needs it. | ||
Line 66: | Line 66: | ||
</code> | </code> | ||
- | ===== openssl-gencrt script ===== | + | ===== SSL Key Generation - Script Method ===== |
- | The above commands are in openssl-gencrt to simplify cert creation: | + | |
- | * Launch openssl-keygen with the desired Certificate Name as an argument | + | **This entire section is duplicated above in the [[#ssl_key_generation_-_manual_method|SSL Key Generation - Script Method]] section. Do one or the other, not both.** |
+ | This is repeated for each application that needs it. | ||
+ | |||
+ | The above commands are in a script named ''openssl-gencrt'' to simplify certificate creation: | ||
+ | |||
+ | * Copy ''/usr/local/sbin/openssl-gencrt'' from another system if not already done. | ||
+ | |||
+ | * Launch ''openssl-keygen'' with the desired Certificate Name as an argument | ||
<code rootshell> | <code rootshell> | ||
- | openssl-gencrt <Certificate Name>e | + | openssl-gencrt <name> |
</code> | </code> | ||
* The defaults for SLUUG are provided - a <cr> will accept them; only the common name is required to be entered. | * The defaults for SLUUG are provided - a <cr> will accept them; only the common name is required to be entered. | ||
* Defaults may be overridden if required | * Defaults may be overridden if required | ||
- | * NOTE: A passphrase is requifor the key - it is removed in the second step | + | * NOTE: A passphrase is required for the key - it is removed in the second step |
===== Defaults ===== | ===== Defaults ===== |