| 12345678910111213141516171819202122232425262728 |
- The server.cfg server_ssl_key_file and admin.cfg sslkey_file variable are to
- point to a file containing a "PRIVATE KEY" and one or more "CERTIFICATE"
- sections. ["TRUSTED CERTIFICATE"?] A depth zero self-signed certificate can
- be generated using `openssl req -x509 -nodes -newkey rsa`.
- The server.cfg sslkeys_path must point to a directory which contains "PUBLIC
- KEY" files for the corresponding allowed client certificate(s). These can be
- generated per certificate using `openssl rsa -in client.private.key -pubout`.
- To generate subjectAltNames:
- cat >local.conf <<-EOF
- [v3_req]
- # For "real" requests
- subjectAltName=@alt
- [v3_ca]
- # For CAs and self-signed certificates
- subjectAltName=@alt
- [alt]
- DNS.1 = kopano.example.com
- DNS.2 = localhost
- IP.1 = 127.0.0.1
- EOF
- openssl req ... -config <(cat /etc/ssl/openssl.cnf local.conf) \
- -subj /CN=CouldBeAnything
- openssl.cnf is the distro-provided default configuration.
|
