SSL Certificate Creation - Revision history

Tim at 19:04, 29 September 2007

Tim — Sat, 29 Sep 2007 19:04:51 GMT

←Older revision		Revision as of 19:04, 29 September 2007
Line 15:		Line 15:
	<li><code>apachectl start</code></li>		<li><code>apachectl start</code></li>
	</ol>		</ol>
		+
		+	[[Category:Admin]]

Tim at 17:44, 17 May 2006

Tim — Wed, 17 May 2006 17:44:51 GMT

←Older revision		Revision as of 17:44, 17 May 2006
Line 7:		Line 7:
	<li><code>mv hostname.cert /etc/ssl/certs/hostname.crt</code></li>		<li><code>mv hostname.cert /etc/ssl/certs/hostname.crt</code></li>
	</ol>		</ol>
-
-	~~test~~

	Note: "make sign" will delete the CSR, so make a copy ahead of time if you're going to want it later.		Note: "make sign" will delete the CSR, so make a copy ahead of time if you're going to want it later.
		+
		+	Stop and start any services using the certificate. Apache doesn't seem to load the new cert if it's simply restarted - you have to actually stop and start it.
		+	<ol>
		+	<li><code>apachectl stop</code></li>
		+	<li><code>apachectl start</code></li>
		+	</ol>

24.84.53.220 at 17:37, 17 May 2006

24.84.53.220 — Wed, 17 May 2006 17:37:18 GMT

←Older revision		Revision as of 17:37, 17 May 2006
Line 7:		Line 7:
	<li><code>mv hostname.cert /etc/ssl/certs/hostname.crt</code></li>		<li><code>mv hostname.cert /etc/ssl/certs/hostname.crt</code></li>
	</ol>		</ol>
		+
		+	test

	Note: "make sign" will delete the CSR, so make a copy ahead of time if you're going to want it later.		Note: "make sign" will delete the CSR, so make a copy ahead of time if you're going to want it later.

Tim: log.antiflux.org.key -> hostname.key

Tim — Tue, 14 Jun 2005 04:21:50 GMT

log.antiflux.org.key -> hostname.key

←Older revision		Revision as of 04:21, 14 June 2005
Line 2:		Line 2:
	<ol>		<ol>
	<li><code>openssl genrsa -out /etc/ssl/private/hostname.key 1024</code></li>		<li><code>openssl genrsa -out /etc/ssl/private/hostname.key 1024</code></li>
-	<li><code>openssl req -new -key /etc/ssl/private/~~log.antiflux.org~~.key -out /etc/ssl/antiflux/hostname.csr</code></li>	+	<li><code>openssl req -new -key /etc/ssl/private/hostname.key -out /etc/ssl/antiflux/hostname.csr</code></li>
	<li><code>cd /etc/ssl/antiflux</code></li>		<li><code>cd /etc/ssl/antiflux</code></li>
	<li><code>make sign</code></li>		<li><code>make sign</code></li>

Tim at 15:01, 16 May 2005

Tim — Mon, 16 May 2005 15:01:45 GMT

←Older revision		Revision as of 15:01, 16 May 2005
Line 3:		Line 3:
	<li><code>openssl genrsa -out /etc/ssl/private/hostname.key 1024</code></li>		<li><code>openssl genrsa -out /etc/ssl/private/hostname.key 1024</code></li>
	<li><code>openssl req -new -key /etc/ssl/private/log.antiflux.org.key -out /etc/ssl/antiflux/hostname.csr</code></li>		<li><code>openssl req -new -key /etc/ssl/private/log.antiflux.org.key -out /etc/ssl/antiflux/hostname.csr</code></li>
-	<li><code>cd /etc/ssl/~~private~~</code></li>	+	<li><code>cd /etc/ssl/antiflux</code></li>
	<li><code>make sign</code></li>		<li><code>make sign</code></li>
	<li><code>mv hostname.cert /etc/ssl/certs/hostname.crt</code></li>		<li><code>mv hostname.cert /etc/ssl/certs/hostname.crt</code></li>

Tim at 05:26, 16 May 2005

Tim — Mon, 16 May 2005 05:26:05 GMT

New page

To generate a certificate for "hostname" signed with our CA key:
<ol>
<li><code>openssl genrsa -out /etc/ssl/private/hostname.key 1024</code></li>
<li><code>openssl req -new -key /etc/ssl/private/log.antiflux.org.key -out /etc/ssl/antiflux/hostname.csr</code></li>
<li><code>cd /etc/ssl/private</code></li>
<li><code>make sign</code></li>
<li><code>mv hostname.cert /etc/ssl/certs/hostname.crt</code></li>
</ol>

Note: "make sign" will delete the CSR, so make a copy ahead of time if you're going to want it later.