[opensuse] Help with Yast CA Module
I need help using Yast's CA module. Specifically, how do I make an SSL that it not encrypted and does not need a passphrase. I need to make a self signed cert to us for my mail server (Postfix). Every time I try to make a cert it insists on me inputting a passphrase, and the cert is encrypted. Is there a how-to on this? Many thanks, Jim F -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Sunday 31 January 2010 22:17:08 Jim Flanagan wrote:
I need help using Yast's CA module. Specifically, how do I make an SSL that it not encrypted and does not need a passphrase. I need to make a self signed cert to us for my mail server (Postfix). Every time I try to make a cert it insists on me inputting a passphrase, and the cert is encrypted. Is there a how-to on this?
Create the encrypted cert with passphrase. Then use the 'Export' dropdown in the lower right of the CA window to export the certificate to the format you need. Anders -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Anders Johansson wrote:
On Sunday 31 January 2010 22:17:08 Jim Flanagan wrote:
I need help using Yast's CA module. Specifically, how do I make an SSL that it not encrypted and does not need a passphrase. I need to make a self signed cert to us for my mail server (Postfix). Every time I try to make a cert it insists on me inputting a passphrase, and the cert is encrypted. Is there a how-to on this?
Create the encrypted cert with passphrase. Then use the 'Export' dropdown in the lower right of the CA window to export the certificate to the format you need.
Anders
Ahhh....missed seeing that. Great tip. Will work on that. Many many thanks, Jim F -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Anders Johansson wrote:
On Sunday 31 January 2010 22:17:08 Jim Flanagan wrote:
I need help using Yast's CA module. Specifically, how do I make an SSL that it not encrypted and does not need a passphrase. I need to make a self signed cert to us for my mail server (Postfix). Every time I try to make a cert it insists on me inputting a passphrase, and the cert is encrypted. Is there a how-to on this?
Create the encrypted cert with passphrase. Then use the 'Export' dropdown in the lower right of the CA window to export the certificate to the format you need.
Anders
OK, I made the initial cert with passphrase and it was encrypted. I then signed it, and then exported it to a file. There is one file that contains first the cert string, and then the key string, all in that one file. I think I need to split those out to two seperate files, is this correct? Can I do this in kwrite, afterwards making sure the key is chowned to root and chmod to 400? Thanks, Jim F -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Monday 01 February 2010 21:06:12 Jim Flanagan wrote:
Anders Johansson wrote:
On Sunday 31 January 2010 22:17:08 Jim Flanagan wrote:
I need help using Yast's CA module. Specifically, how do I make an SSL that it not encrypted and does not need a passphrase. I need to make a self signed cert to us for my mail server (Postfix). Every time I try to make a cert it insists on me inputting a passphrase, and the cert is encrypted. Is there a how-to on this?
Create the encrypted cert with passphrase. Then use the 'Export' dropdown in the lower right of the CA window to export the certificate to the format you need.
Anders
OK, I made the initial cert with passphrase and it was encrypted. I then signed it, and then exported it to a file. There is one file that contains first the cert string, and then the key string, all in that one file. I think I need to split those out to two seperate files, is this correct? Can I do this in kwrite, afterwards making sure the key is chowned to root and chmod to 400?
Yes, that should be possible. I use vim when I do things like that, but kwrite should do fine. I don't think it will add any strange format characters Anders -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (2)
-
Anders Johansson -
Jim Flanagan