On Sunday 27 February 2005 16:56, James Knott wrote:
I run an imap server, which requires me to create a new ssl certificate, every few weeks. Is there any way to set it for a longer life? Or is there a method of passing the parameters to openssl for creating the certificate, so that I don't have to re-enter the info? Currently, I use the command "openssl req -new -x509 -nodes -out imapd.pem -keyout imapd.pem" to generate the certificate, but I still have to manually enter all the info.
Have a look at /usr/bin/gensslcert. It is in the apache2 rpm, and it is specific to apache2. A quick peek revealed me that it would not be difficult to hack the script to use a different output directory, and perhaps to use a different lifetime. Cheers, Leen