LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 06-12-2002, 06:52 PM   #1
mikeyt_333
Member
 
Registered: Jun 2001
Location: Up in the clouds
Distribution: Fedora et al.
Posts: 353

Rep: Reputation: 30
Self Signing Certificates


I use certificates for accessing company email, so there is no need for a CA like verisign etc... However, I don't know jack about creating certs, and I have just discovered that all certs I create expire within 30 days, here is how I create them:

openssl req -new -key filename.key -x509 -out filename.crt

I found this in a howto. I have read the man pages and what little information is available on the openssl site, but I still don't understand how to create certificates. Can anybody shed some light?

Mike.
 
Old 06-13-2002, 01:59 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,311
Blog Entries: 54

Rep: Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860
Add arguments like "-days $val" when you make the cert.
Also look at your ssl/ssleay/openssl.conf for default_days, it's under under crl extensions IIRC.
 
Old 06-13-2002, 11:46 AM   #3
mikeyt_333
Member
 
Registered: Jun 2001
Location: Up in the clouds
Distribution: Fedora et al.
Posts: 353

Original Poster
Rep: Reputation: 30
Thanks for the info, I found it after I had posted the post. Can you recommend a good place for better howto's on certificates etc... Openssl's site doesn't have a single complete document, and the openssl help screens don't explain jack, and the man pages also are pretty cryptic. Is there a howto out there or maybe a book that explains in decent detail how to do things with openssl?

TIA
Mike.
 
Old 06-13-2002, 05:58 PM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,311
Blog Entries: 54

Rep: Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860Reputation: 2860
You mean like http://www.google.com/search?q=openssl+howto ?
Hmm. Guess I got most of it tru the SSL docs, my apache-ssl tarball and the usual Apache-${insert_app_here}-SSL-HOWTO's.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
gaim not signing in to MSN gumbald Linux - Software 3 07-19-2005 05:46 PM
signing on to ISP using KPPP europa Linux - Networking 0 06-15-2004 11:25 AM
Signing in avarus LinuxQuestions.org Member Intro 1 04-03-2004 10:31 PM
Use Openssl to do signing and verification johnny.lee Programming 0 02-18-2004 09:30 PM
signing in hotmail wilbertcsci Linux - Software 7 11-02-2003 06:55 AM


All times are GMT -5. The time now is 03:32 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration