Certificate: Difference between revisions

From QmailToaster
Jump to navigation Jump to search
No edit summary
No edit summary
Line 13: Line 13:
#* Restart services
#* Restart services


## Self-Signed Certificate
# Self-Signed Certificate
### openssl genrsa -out x.key 2048
### openssl genrsa -out x.key 2048
### openssl req -new -key x.key -out x.csr
### openssl req -new -key x.key -out x.csr

Revision as of 10:57, 20 March 2024

Security Certificate

To configure a SSL certificate for TLS and/or SSL over SMTP:

  1. Abstract: Create Certificate
    • Generate key
    • Generate signing request
    • Sign the key
    • Create server certificate
    • Set permission
    • Set owner
    • Copy into place
    • Restart services
  1. Self-Signed Certificate
      1. openssl genrsa -out x.key 2048
      2. openssl req -new -key x.key -out x.csr
      3. openssl x509 -req -days 3650 -in x.csr -signkey x.key -out x.crt
      4. cat x.crt x.key > servercert.pem
      5. chmod 644 servercert.pem
      6. chown root:qmail servercert.pem
      7. cp -p servercert.pem /var/qmail/control