[opensuse] Apache SSL Certificate Generation
Hi All, I am trying to create a self-signed certificate in apache2. In the openSUSE Reference I found this: Creating a self-signed certificate is an interactive nine-step process. Change into the directory /usr/share/doc/packages/apache2 and run the following command: ./mkcert.sh make --no-print-directory /usr/bin/openssl /usr/sbin/ custom. Do not attempt to run this command from outside this directory. The program provides a series of prompts, some of which require user input. But the file mkcert.sh does not exist! I have looked on the forums and cannot find anything helpful. Any ideas? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 04/07/2013 12:58 PM, Paul Groves wrote:
But the file mkcert.sh does not exist! I have looked on the forums and cannot find anything helpful. Any ideas?
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----Original Message----- From: Cristian Rodríguez Sent: Sunday, April 07, 2013 5:58 PM To: opensuse@opensuse.org Subject: Re: [opensuse] Apache SSL Certificate Generation On 04/07/2013 12:58 PM, Paul Groves wrote:
But the file mkcert.sh does not exist! I have looked on the forums and cannot find anything helpful. Any ideas?
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org Hi Christian, it is in the OpenSUSE 12.3 and 12.2 reference manual chapter 20.6.1.2 - Creating a Self-Signed Certificate (page 391). I am surprised that the reference has not been updated! http://doc.opensuse.org/documentation/html/openSUSE/opensuse-reference/cha.a... http://doc.opensuse.org/documentation/html/openSUSE_122/opensuse-reference/c... Could anyone please point me to an updated article on how to create my own SSL certificate? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On 04/07/2013 03:36 PM, Paul Groves wrote:
-----Original Message----- From: Cristian Rodríguez Sent: Sunday, April 07, 2013 5:58 PM To: opensuse@opensuse.org Subject: Re: [opensuse] Apache SSL Certificate Generation
On 04/07/2013 12:58 PM, Paul Groves wrote:
But the file mkcert.sh does not exist! I have looked on the forums and cannot find anything helpful. Any ideas?
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ?
Please fill a bug report against the documentation component, references to mkcert.sh must be removed. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sunday, 2013-04-07 at 17:29 -0300, Cristian Rodríguez wrote:
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ?
Please fill a bug report against the documentation component, references to mkcert.sh must be removed.
Dovecot has it. /usr/share/doc/packages/dovecot/mkcert.sh - -- Cheers, Carlos E. R. (from 12.1 x86_64 "Asparagus" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) iEYEARECAAYFAlFh3SUACgkQtTMYHG2NR9UqIgCeMf99TGLruKy2O1vNmRonJQnt yfkAoI3LulUc//3iJXM2tWpmuqDxbERh =D0Gj -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sunday, 2013-04-07 at 17:29 -0300, Cristian Rodríguez wrote:
On 04/07/2013 12:58 PM, Paul Groves wrote:
But the file mkcert.sh does not exist! I have looked on the forums and cannot find anything helpful. Any ideas?
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ?
Please fill a bug report against the documentation component, references to mkcert.sh must be removed.
And what is the correct procedure now to create the certificate? So that the doc team can document it. Link, rtfm? - -- Cheers, Carlos E. R. (from 12.1 x86_64 "Asparagus" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) iEYEARECAAYFAlFh3oYACgkQtTMYHG2NR9X6lQCfdJ/+Xip3FNIgGa3pEP1FZwOY z8UAoIQdT9wEIzK41tEmWi4+6JlxtRQq =P7ms -----END PGP SIGNATURE-----
On Sun, Apr 07, 2013 at 11:00:54PM +0200, Carlos E. R. wrote:
On Sunday, 2013-04-07 at 17:29 -0300, Cristian Rodríguez wrote:
On 04/07/2013 12:58 PM, Paul Groves wrote:
But the file mkcert.sh does not exist! I have looked on the forums and cannot find anything helpful. Any ideas?
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ?
Please fill a bug report against the documentation component, references to mkcert.sh must be removed.
And what is the correct procedure now to create the certificate? So that the doc team can document it. Link, rtfm?
Please give the YaST Certification Authority (CA) management module a try. It's part of the yast2-ca-management package. It requires some base knowledge of the CA concept. See http://doc.opensuse.org/documentation/html/openSUSE/opensuse-security/cha.se... for more details. Cheers, Lars -- Lars Müller [ˈlaː(r)z ˈmʏlɐ] Samba Team + SUSE Labs SUSE Linux, Maxfeldstraße 5, 90409 Nürnberg, Germany
-----Original Message-----
From: Lars Müller
On Sunday, 2013-04-07 at 17:29 -0300, Cristian Rodríguez wrote:
On 04/07/2013 12:58 PM, Paul Groves wrote:
But the file mkcert.sh does not exist! I have looked on the forums and cannot find anything helpful. Any ideas?
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ?
Please fill a bug report against the documentation component, references to mkcert.sh must be removed.
And what is the correct procedure now to create the certificate? So that the doc team can document it. Link, rtfm?
Please give the YaST Certification Authority (CA) management module a try. It's part of the yast2-ca-management package. It requires some base knowledge of the CA concept. See http://doc.opensuse.org/documentation/html/openSUSE/opensuse-security/cha.se... for more details. -----Original Message----- I agree with Lars, Specially for small set ups, it is a beautiful tool. For years i used it (made a boot-able usb-stick with kiwi/studio), used the keys/certificates for openvpn, and kept the usb-stick in a vault: Safe & Simple. Recommend it! HW -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday, 2013-04-09 at 20:37 +0200, Lars Müller wrote:
On Sun, Apr 07, 2013 at 11:00:54PM +0200, Carlos E. R. wrote:
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ?
And what is the correct procedure now to create the certificate? So that the doc team can document it. Link, rtfm?
Please give the YaST Certification Authority (CA) management module a try. It's part of the yast2-ca-management package.
Yes, I have used it. At the moment, though, I don't remember if I managed to do it with yast or had to use the script instead. I do have to renew my local dovecot certificate, so I'll see.
It requires some base knowledge of the CA concept. See http://doc.opensuse.org/documentation/html/openSUSE/opensuse-security/cha.se... for more details.
Thanks. - -- Cheers, Carlos E. R. (from 12.1 x86_64 "Asparagus" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (GNU/Linux) iEYEARECAAYFAlFkk0AACgkQtTMYHG2NR9XcIwCeMh2ZtubDqerYgRKU1ynCqW1V luMAn3ZuOM/gpXJWRcAfhswNc/YaEfKA =c5hP -----END PGP SIGNATURE-----
On Sun, 7 Apr 2013 19:36:34 +0100
"Paul Groves"
Christian Rodrigues wrote:
mkcert.sh was removed two years ago.. in which exact document did you saw this recommendation ?
Hi Christian,
it is in the OpenSUSE 12.3 and 12.2 reference manual chapter 20.6.1.2 - Creating a Self-Signed Certificate (page 391). I am surprised that the reference has not been updated!
http://doc.opensuse.org/documentation/html/openSUSE/opensuse-reference/cha.a... http://doc.opensuse.org/documentation/html/openSUSE_122/opensuse-reference/c...
Could anyone please point me to an updated article on how to create my own SSL certificate?
This is top of the list in Google search. It is not openSUSE specific, though. http://www.digicert.com/csr-creation-apache.htm [And please don't put any text below signature as it is not automatically copied in reply, I had to add it manually. As signature is considered anything below "-- " (dash, dash, space)] -- Regards, Rajko. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (6)
-
Carlos E. R. -
Cristian Rodríguez -
Hans Witvliet -
Lars Müller -
Paul Groves -
Rajko