LITTLEBLACKDOG.COM

Big Dog Joined: 18 Oct 2000 Posts: 4419

Feel free to post any questions, comments, or feedback regarding this article. We will do our best to answer any questions you may have, and look forward to your feedback on this article!

Original Article - http://www.littlewhitedog.com/content-71.html

Posted: Tue Mar 02, 2004 2:40 am Post subject:

What an excellent article. I certainly learned a thing or two writ- reading it.

Posted: Tue Mar 02, 2004 4:37 am Post subject:

Good article, Demon. It's always refreshing to read from someone who knows their own language well.

/me looks forward to the sequel

Posted: Tue Mar 02, 2004 5:39 am Post subject:

now thats what i'm talking about... good job...

for those interested building a cert in *nix is pretty easy...

($:~)=> vi pst.cnf

Code: Select all




RANDFILE = /etc/postfix/ssl/post.rand     





[ req ] 


default_bits = 1024 


encrypt_key = yes 


distinguished_name = req_dn 


x509_extensions = cert_type 


prompt = no     





[ req_dn ] C=countryName Two letters! 


ST=stateOrProvinceName 


L=localityName 


O=organizationName 


OU=OrganizationalUnitName 


CN=commonName 


emailAddress=emailAddress     





[ cert_type ] 


nsCertType = server

($:~)=> dd if=/dev/urandom of=./post.rand count=1 2>/dev/null

($:~)=> /usr/sbin/openssl req -new -x509 -days 365 -nodes \
-config ./pst.cnf -out ./post.pem -keyout ./post.pem

($:~)=> /usr/sbin/openssl gendh -rand ./post.rand 512 \ >>/etc/postfix/ssl/post.pem

($:~)=> /usr/sbin/openssl x509 -subject -dates -fingerprint -noout -in ./post.pem

And *Bamm* u got certs... which reminds me mine expire this month Sad

i need to do something about that..

Posted: Sat Mar 06, 2004 4:14 am Post subject:

Heh. *giggle*

A quick Google for SSL Certificates has this article in fifth place already. Smile

Posted: Thu Jul 15, 2004 8:58 pm Post subject:

Demon wrote:
Heh. *giggle*

A quick Google for SSL Certificates has this article in fifth place already.

can we say we rock? I knew we could

Posted: Fri Jul 16, 2004 1:43 pm Post subject:

Wow! great article. and what timing! recently i've started caring more about security and last night i even went so far as to get my own personal email certificate from Thawte. of course it's all still greek to me but this article was a big help. now get back to work on some follow up articles! Smile

Leg Humper Joined: 01 Jun 2004 Posts: 4700 Location: Utah

Haven't read it yet, but I've been thinking about using SSL for my admin script I'm planning on writing. I'm sure this'll be a big help, since I know nothing of SSL at the moment, besides that it uses 128bit encryption...

Code: Select all

Demon wrote:

Lycander wrote: