From owner-freebsd-questions@FreeBSD.ORG Sun Dec 19 17:59:10 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 18C6816A4CE for ; Sun, 19 Dec 2004 17:59:10 +0000 (GMT) Received: from mail.terralink.de (mail.tlink.de [217.9.16.16]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6814643D41 for ; Sun, 19 Dec 2004 17:59:09 +0000 (GMT) (envelope-from me@daniel.stefan.haischt.name) Received: from smtp.abyssworld.de (daniel-s-haischt.biz [84.252.66.2]) by mail.terralink.de (Postfix) with ESMTP id 41B64BD63B; Sun, 19 Dec 2004 18:59:07 +0100 (CET) Received: from localhost (smtp.abyssworld.de [192.168.0.7]) by smtp.abyssworld.de (Postfix) with ESMTP id 2F1B918B6A; Sun, 19 Dec 2004 18:59:06 +0100 (CET) Received: from smtp.abyssworld.de ([127.0.0.1])port 10024) with ESMTP id 83146-04; Sun, 19 Dec 2004 18:59:05 +0100 (CET) Received-SPF: none (smtp.abyssworld.de: 192.168.0.7 is neither permitted nor denied by domain of daniel.stefan.haischt.name) client-ip=192.168.0.7; envelope-from=me@daniel.stefan.haischt.name; helo=[192.168.120.239]; Received: from [192.168.120.239] (smtp.abyssworld.de [192.168.0.7]) by smtp.abyssworld.de (Postfix) with ESMTP id 8200018B3C; Sun, 19 Dec 2004 18:59:04 +0100 (CET) Message-ID: <41C5C167.8040604@daniel.stefan.haischt.name> Date: Sun, 19 Dec 2004 18:59:03 +0100 From: "Daniel S. Haischt" User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: de-DE, de, en-us, en MIME-Version: 1.0 To: dave References: <000d01c4e5f2$7add5b30$0400a8c0@satellite> In-Reply-To: <000d01c4e5f2$7add5b30$0400a8c0@satellite> X-Enigmail-Version: 0.89.5.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Comment-1: GNU's Not Unix! X-Comment-2: Support FSF! X-Virus-Scanned: amavisd-new at abyssworld.de cc: freebsd-questions@freebsd.org Subject: Re: courier imap keys and self-signed ca signing X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Dec 2004 17:59:10 -0000 Why don't you read the OpenSSL manual that comes with your SSL-enabled Apache? Anyway here's a basic command line example: generate the pop certificate request: ------------------------------------- openssl req -config path/to/ur/openssl.cnf \ -newkey rsa:2048 -keyout pop-server-key.pem \ -out pop-server-req.pem issue the certificate using a existing CA certificate: ------------------------------------------------------ openssl ca -config path/to/ur/openssl.cnf \ -name name-of-ur-ca \ -in pop-server-req.pem -out pop-server-cert.pem Read your OpenSSL manual as well. dave schrieb: > Hello, > I've got a 5.3 box that i'm using as a self-signing ca. I want to get > keys going for all the various protocols i use, http, which i've done, pop > and imap, and smtp. It's these last three i'm having the headache. I'm using > postfix as my MTA and courier imap for pop/imap, i know that the latter has > a program to generate keys but not csr's, i'm not sure how to get keys from > courier and/or postfix to the ca for signing. I'm probably missing somehing > very basic, and would appreciate any help. > Thanks. > Dave. > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > > !DSPAM:41c5be83339755710121396! > > -- Mit freundlichen Gruessen / With kind regards Daniel S. Haischt | phone: +49 -7032-992909 Grabenstrasse 11 | +49 -700-DHAISCHT | fax: +49 -7032-992910 D-71083 Herrenberg | fax2mail: +49 -7032-7999738 GERMANY | cell: +49 -172-7668936 SIP: sip:haischt@daniel-s-haischt.biz:5060 email: me@daniel.stefan.haischt.name web: http://www.daniel.stefan.haischt.name/