[binc] Fw: SSL certs
"Grant Fletcher" <[email protected]>
| Newsgroups | gmane.mail.imap.binc.general |
|---|---|
| Message-ID | <012201c56e5f$d9d1a1f0$0200a8c0@fletch> |
----- Original Message ----- From: "Grant Fletcher" <[email protected]> To: <[email protected]> Cc: "Stefano Rivera" <[email protected]> Sent: Friday, June 10, 2005 10:54 PM Subject: [binc] SSL certs >
certs.txt
(text/plain, 1.1 KB)
Hi S
can you have a look at this for me please...
this is taken from Peter Stuge's guide to ssl certs..
I got a bit further but not much...
Ok, now the CA is set up.
To make a new cert e.g. for Binc, signed by the DIY CA, create the new key and cert request, on the
machine where Binc will run:
cd /etc/opt/bincimap
(umask 077; openssl genrsa -out binc.key 1024)
openssl req -out binc.req -key binc.key -new
After this, copy binc.req to the CA machine, e.g. to /usr/local/ssl/ca_diy/certs and then sign it with the DIY
"everything works great up to this point", After i type the command
openssl ca -in certs/binc.req -out certs/binc.cert
root@serv bincimap]# openssl ca -in cert/binc.req -out cert/binc.cert
Using configuration from /usr/share/ssl/openssl.cnf
Error opening CA private key ./demoCA/private/cakey.pem
16366:error:02001002:system library:fopen:No such file or directory:bss_file.c:259:fopen('./demoCA/private/cakey.pem','r')
16366:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:261:
unable to load CA private key
[root@serv bincimap]#
can you help!
G