starttls certificate question
Hi,
Firstly, I was wondering are the dates for this newsgroup's
posts dated in 2005 or 2006?
Secondly, the mail server's certificate had expired.
Now I'm trying to generate a new one; but I have forgotten
how exactly I should create one. I surf'd the net and
came across the following commands:
(make a new certificate)
openssl req -nodes -new -x509 -keyout newreq.pem \
-out newreq.pem -days 365 \
-config ./openssl.cnf
(sign)
openssl x509 -x509toreq -in newreq.pem \
-signkey newreq.pem -out tmp.pem
openssl ca -config ./openssl.cnf \
-policy policy_anything \
-out newcert.pem -infiles tmp.pem
Then I stick the newcert.pem into the certificate
file path. But what about the Key file? When
I generated it, no key file was made or am I mistaken?
Any appreciated
Edmund
|