User Tools

Site Tools


startcom

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Last revision Both sides next revision
startcom [2014/11/24 01:48]
ben Bulk convert mediawiki code block formatting
startcom [2014/11/24 01:50]
ben
Line 19: Line 19:
 <code bash> <code bash>
 openssl req -new -key domain.sihnon.net.key -out domain.sihnon.net.csr openssl req -new -key domain.sihnon.net.key -out domain.sihnon.net.csr
-</code >+</code>
  
 Send the CSR to cacert.org, and cat the result into domain.sihnon.net.pem Send the CSR to cacert.org, and cat the result into domain.sihnon.net.pem
Line 29: Line 29:
 <code bash> <code bash>
 cat sub.class2.server.startcom.crt startcom.crt > sub.class2.server.startcom.bundle.crt cat sub.class2.server.startcom.crt startcom.crt > sub.class2.server.startcom.bundle.crt
-</code >+</code>
  
 And configure apache to send the bundle along with the certificate And configure apache to send the bundle along with the certificate
Line 38: Line 38:
 SSLCertificateKeyFile /etc/apache2/ssl/$VHOST.sihnon.net.key SSLCertificateKeyFile /etc/apache2/ssl/$VHOST.sihnon.net.key
 SSLCertificateChainFile /etc/apache2/ssl/sub.class2.server.startcom.bundle.crt SSLCertificateChainFile /etc/apache2/ssl/sub.class2.server.startcom.bundle.crt
-</code >+</code>
  
 ==== Server Name Indication ==== ==== Server Name Indication ====
Line 47: Line 47:
     # echo "www-server/apache sni" >> /etc/portage/package.use     # echo "www-server/apache sni" >> /etc/portage/package.use
     # emerge apache -av     # emerge apache -av
-</code >+</code>
  
 Now, with very little effort, it is possible to set up multiple vhosts with SSL enabled as above and everything should Just Work&trade; Now, with very little effort, it is possible to set up multiple vhosts with SSL enabled as above and everything should Just Work&trade;
Line 57: Line 57:
 smtpd_tls_cert_file = /etc/ssl/smtp.sihnon.net.crt smtpd_tls_cert_file = /etc/ssl/smtp.sihnon.net.crt
 smtpd_tls_CAfile = /etc/ssl/sub.class2.server.startcom.bundle.crt smtpd_tls_CAfile = /etc/ssl/sub.class2.server.startcom.bundle.crt
-</code >+</code>
  
 ===== Using certificates in courier-imap ===== ===== Using certificates in courier-imap =====
Line 64: Line 64:
 cat domain.sihnon.net.key domain.sihnon.net.pem > domain.sihnon.net.courier.pem cat domain.sihnon.net.key domain.sihnon.net.pem > domain.sihnon.net.courier.pem
 openssl gendh >> domain.sihnon.net.courier.pem openssl gendh >> domain.sihnon.net.courier.pem
-</code >+</code>
  
 ===== Certificates issued by startcom ===== ===== Certificates issued by startcom =====
startcom.txt · Last modified: 2014/11/24 02:11 by ben