Topic: Creating a Self-Signed SSL Certificate

[NickCritten]

Jester (and anyone else who's interested)

I've just knocked together this script... Would you like to give it a go?

http://lmeit.co.uk/sslauto.php

It's very quick-and-dirty at the mo and doesn't contain the instructions, but you should get the Idea from the other Howto

[kabowers]

Hi Nick,
just tried your script, it worked fine.

one slight change possibly needed, where you ask for the domain name you may want to indicate to leave out "www." or you will get some people having trouble.

off topic

hows sunny Cardiff these days?
Are you still with NSL?

[CharlieBrady]

Hi Nick,
just tried your script, it worked fine.

Until the certificate expires, when it will again be replaced by the standard SME one.

All the script generated by that website does is give you a chance to provide new answers to the questions below:

...
Country Name (2 letter code) [GB]:
State or Province Name (full name) [Berkshire]:
Locality Name (eg, city) [Newbury]:
Organization Name (eg, company) [My Company Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) []:
Email Address []:
...

The standard SME template answers these with:

--
---
"City" property from "directory" panel
"Company" property from "directory" panel
"Department" property from "directory" panel
$SystemName.$DomainName
admin@$SystemName.$DomainName

If you want different answers to those ones, then most of them you can change via the "directory" panel, and the remaining ones you can change by changing your SystemName or DomainName - or by using a custom template.

If you think any of the default answers should be changed, or the certificate is not updated any time that it should be, then please use the Bug Tracker.

[NickCritten]

off topic

hows sunny Cardiff these days?
Are you still with NSL?

Hiya Keith!!

No time right now I'm on the way to work.. Will PM you later

[jester]

Hi Nick,

Love it! I'm in the UK at the moment.... i'll give the instructions a go as soon as i get back to Holland where my test server is.

Thanx!
jester.

[jester]

Hi Nick,

Your auto generated howto works like a charm..... it would do well as a server-manager panel: only needs to ask for a new 'common name' and when to expire, rest is known.

I've got no more msg complaining about non matching names.

Thanx!!
jester.

[NickCritten]

No Worries... I'll tidy it up at some point.

btw I've logged a feature request on BugTracker..

You might be interested:  http://bugs.contribs.org/show_bug.cgi?id=1508


KBowers: Could you email me please? My address on the SSL Howto,

Cheers,

[NickCritten]

or by using a custom template.

Please see my new template-based howto:
http://mirror.contribs.org/smeserver/contribs/nickcritten/howtos/ssl7.htm

How does this float your boat?

[NickCritten]

or by using a custom template.

Please see my new template-based howto:
http://mirror.contribs.org/smeserver/contribs/nickcritten/howtos/ssl7.htm

How does this float your boat?

I just noticed a typo in the template text - Uploading V1.0.1
It should come up on ibilblio in an hour or two.

[andy_wismer]

@CharlieBrady:

If the server has virtual hosts in the form of say:

mail.domainname.xxx
www.domainname.xxx
intranet.domainname.xxx

it IS possible to create a Certificate for *.domainname.xxx.

A Certificate for the IP adress helps too. On say SuSE I created one for the internal IP, one for the external IP (The Server only has the port forwarded from a Sonicwall Firewall...) and one for the name as shown above.

That does work.

Regards

Andy

[NickCritten]

@CharlieBrady:

it IS possible to create a Certificate for *.domainname.xxx.

A Certificate for the IP adress helps too. On say SuSE I created one for the internal IP, one for the external IP (The Server only has the port forwarded from a Sonicwall Firewall...) and one for the name as shown above.

That does work.

Regards

Andy

Hi Andy,

Could you tell me how you do this?

Cheers,

Nick

[andy_wismer]

Hi Nick

I found that about 1-2 years ago in a german linux mag called FreeX. I still have the mag and have done a small How-To (In German) for some friends, I'll post a small how-to in english say by Friday or Saturday...

Regards

Andy

[NickCritten]

Sweet

[mercyh]

Nice work on the howto

[NickCritten]

Nice work on the howto

Thanks