From owner-freebsd-questions@FreeBSD.ORG Wed Apr 13 18:05:39 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B38F016A4CE for ; Wed, 13 Apr 2005 18:05:39 +0000 (GMT) Received: from tco2.iaminsane.net (dsl017-004-081.ser1.dsl.speakeasy.net [69.17.4.81]) by mx1.FreeBSD.org (Postfix) with ESMTP id EFEA443D46 for ; Wed, 13 Apr 2005 18:05:38 +0000 (GMT) (envelope-from rem@thecompanyonline.com) Received: from [10.50.30.140] ([216.109.255.7]) (authenticated bits=0) by tco2.iaminsane.net (8.12.10/8.12.10) with ESMTP id j3DHorvY003030 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 13 Apr 2005 13:51:01 -0400 (EDT) (envelope-from rem@thecompanyonline.com) Message-ID: <425D5F75.7020402@thecompanyonline.com> Date: Wed, 13 Apr 2005 14:05:41 -0400 From: Richard Mcintyre User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.6) Gecko/20050319 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <425D51F6.3090108@thecompanyonline.com> In-Reply-To: <425D51F6.3090108@thecompanyonline.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on tco2.iaminsane.net X-Virus-Scanned: clamd / ClamAV version devel-20040331, clamav-milter version 0.70a Subject: Re: SSL Certificate question. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Apr 2005 18:05:39 -0000 Okay, so I'm a bit slow on the uptake but I figured out that the PEM1 and PEM2 commands are supposed to be preceeded by set in my shell. I have now generated the new certificate, but how do I get sendmail to recognize it? I have even built sendmail from the src on my local machine. for some reason it's still utilizing the old openssl certificate that I generated over a year ago (even though the actual file was removed before I ran the commands below. Your help is appreciated. ~REM Richard Mcintyre wrote: > All, > > I'm usually just a lurker on this list but I ran into a small problem. > I recently found out that the SSL certificate I created for my > sendmail server has expired. I need to update it. I was following > along with the suggestions at > http://veldt.com/2003/08/smtp-auth-ssl-with-sendmail-freebsd/ but I > ran into a problem, I was hoping I could just generate a new > certificate with the following commands: > > "next, you’ll need to generate certificates for sendmail to use. > mkdir /etc/mail/certs > cd /etc/mail/certs > mktemp /tmp/openssl.XXXXX1 > mktemp /tmp/openssl.XXXXX2 > PEM1='/tmp/openssl.XXXXX1' > PEM2='/tmp/openssl.XXXXX2' > openssl req -newkey rsa:1024 -keyout $PEM1 \ > -nodes -x509 -days 365 -out $PEM2 > cat $PEM1 > sendmail.pem > echo "" >> sendmail.pem > cat $PEM2 >> sendmail.pem > cp $PEM2 ca-bundle.crt > rm $PEM1 $PEM2 > chmod 400 sendmail.pem > chmod 400 ca-bundle.crt > " > > > I ran into some problems around "PEM1='/tmp'openssl.XXXXX1' for some > reason FreeBSD is now seeing this as a command, and is responding > "PEM1=/tmp/openssl.XXXXX1: Command not found." I am certain that these > are the commands I ran the first time (04/12/2004) to create the > certificates, why aren't they working now? > > Thanks for your help... > > tco2# uname -a > FreeBSD tco2.iaminsane.net 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0: Fri > Apr 23 07:02:47 EDT 2004 > rem@tco2.iaminsane.net:/usr/src/sys/i386/compile/REM_0.0.3 i386 > > > ~REM > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org"