Ssl-certs

From PTAGISWiki

8/23/2004 SSL certs and how to manage them

finninday.net uses SSL certificates to allow for secure email and web transactions. The postfix certificate is /etc/postfix/smtp.pem The corresponding certificate authority is in /etc/postfix/cacert.pem

These allow postfix to use TLS for email.

The web server uses certs here: /usr/share/ssl/certs/sendmail.pem /usr/share/ssl/certs/sendmailkey.pem

The imapd process uses the cert at this location:

/usr/share/ssl/certs/imapd.pem

=---------

There is a tool for simplifying the use of the openssl command for cert management. CA.pl

The default values for this site are kept in /etc/openssl.cnf which is read by CA.pl.

Reference the Linux Documentation Project document on SSL Certs: http://tldp.org/HOWTO/SSL-Certificates-HOWTO/

Recipe for self-signed certs http://www.eclectica.ca/howto/ssl-cert-howto.php