OpenSSL and certificates - Revision history

Reinis at 21:52, 9 February 2010

2010-02-09T21:52:09Z

Reinis at 21:51, 9 February 2010

2010-02-09T21:51:31Z

Reinis at 22:46, 8 February 2010

2010-02-08T22:46:49Z

Reinis at 22:40, 8 February 2010

2010-02-08T22:40:37Z

Reinis at 22:28, 8 February 2010

2010-02-08T22:28:55Z

Reinis at 22:26, 8 February 2010

2010-02-08T22:26:19Z

Reinis: New page: Information on certificate generation for [http://cacert.org CAcert.org] signing. 1. Follow instructions on [http://www.cacert.org/help.php?id=4 CAcert.org] page. 2. That's enough for get...

2010-02-08T22:25:31Z

New page: Information on certificate generation for [http://cacert.org CAcert.org] signing. 1. Follow instructions on [http://www.cacert.org/help.php?id=4 CAcert.org] page. 2. That's enough for get...

New page

Information on certificate generation for [http://cacert.org CAcert.org] signing.

1. Follow instructions on [http://www.cacert.org/help.php?id=4 CAcert.org] page.
2. That's enough for getting simple signed certificate which is good for [http://exim.org/ exim]. For [http://www.courier-mta.org/imap/ Courier IMAP] additionally you will require to do the following steps.
3. <nowiki><pre>dd if=/dev/urandom of=/tmp/cert.rand count=1</pre></nowiki>

@@ Line 10: / Line 10: @@
 Afterwards you have <code>server.pem</code> file that you can use for Courier IMAP and POP3 secure server versions. Put them in secure place, change permisions to <code>0600</code> and set owner to <code>root</code>.
-Configuration of POP3 clients for Gmail described [http://mail.google.com/support/bin/answer.py?hl=en&ctx=mail&answer=12103 here].
+Configuration of POP3 clients for Gmail (also good for [http://tosteris.com tosteris.com]) described [http://mail.google.com/support/bin/answer.py?hl=en&ctx=mail&answer=12103 here].
 Windows and SSL certificate installation described [http://support.real-time.com/windows/email/ssl-cert.html here].

@@ Line 9: / Line 9: @@
 Afterwards you have <code>server.pem</code> file that you can use for Courier IMAP and POP3 secure server versions. Put them in secure place, change permisions to <code>0600</code> and set owner to <code>root</code>.
+Configuration of POP3 clients for Gmail described [http://mail.google.com/support/bin/answer.py?hl=en&ctx=mail&answer=12103 here].
+Windows and SSL certificate installation described [http://support.real-time.com/windows/email/ssl-cert.html here].

@@ Line 7: / Line 7: @@
 # Generate DH pair for certificate: <code>openssl gendh -rand /tmp/cert.rand 512 >>./server.pem</code>
 # Clean-up: <code>rm -f /tmp/cert.rand</code>
+Afterwards you have <code>server.pem</code> file that you can use for Courier IMAP and POP3 secure server versions. Put them in secure place, change permisions to <code>0600</code> and set owner to <code>root</code>.

@@ Line 2: / Line 2: @@
 # Follow instructions on [http://www.cacert.org/help.php?id=4 CAcert.org] page.
-# That's enough for getting simple signed certificate which is good for [http://exim.org/ exim]. For [http://www.courier-mta.org/imap/ Courier IMAP] additionally you will require to do the following steps.
+# That's enough for getting simple signed certificate which is good for [http://exim.org/ exim]. For [http://www.courier-mta.org/imap/ Courier IMAP] additionally you will require to perform the following steps.
-# <code>dd if=/dev/urandom of=/tmp/cert.rand count=1</code>
+# Create a random file: <code>dd if=/dev/urandom of=/tmp/cert.rand count=1</code>
+# Create PEM formated certificate: <code>cat private.key server.crt > server.pem</code>
+# Generate DH pair for certificate: <code>openssl gendh -rand /tmp/cert.rand 512 >>./server.pem</code>
+# Clean-up: <code>rm -f /tmp/cert.rand</code>

@@ Line 1: / Line 1: @@
 Information on certificate generation for [http://cacert.org CAcert.org] signing.
-* Follow instructions on [http://www.cacert.org/help.php?id=4 CAcert.org] page.
+# Follow instructions on [http://www.cacert.org/help.php?id=4 CAcert.org] page.
-* That's enough for getting simple signed certificate which is good for [http://exim.org/ exim]. For [http://www.courier-mta.org/imap/ Courier IMAP] additionally you will require to do the following steps.
+# That's enough for getting simple signed certificate which is good for [http://exim.org/ exim]. For [http://www.courier-mta.org/imap/ Courier IMAP] additionally you will require to do the following steps.
-* <nowiki><pre>dd if=/dev/urandom of=/tmp/cert.rand count=1</pre></nowiki>
+# <code>dd if=/dev/urandom of=/tmp/cert.rand count=1</code>