tls self-signed certificates

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



How do people generate self-signed certificates as this no longer works
for me...

#### generate cyrus certificate ####
openssl req -config /etc/ssl/openssl.cnf \
-new -x509 -nodes \
-out /etc/ssl/cyrus-global.pem \
-keyout /etc/ssl/cyrus-global.pem \
-days 3650
openssl gendh 512 >> /etc/ssl/cyrus-global.pem

and I used to use this cyrus-global.pem for both tls_cert_file and
tls_key_file...

tls_cert_file: /etc/ssl/cyrus-global.pem
tls_key_file: /etc/ssl/cyrus-global.pem
tls_ca_file: /etc/ssl/private/cacert.pem

but this fails...
Oct 16 08:22:47 spot imaps[7905]: imaps TLS negotiation failed:
ip68-230-71-199.ph.ph.cox.net [68.230.71.199]
Oct 16 08:22:47 spot imaps[7905]: Fatal error: tls_start_servertls()
failed

suggestions anyone?

Craig

----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

[Index of Archives]     [Cyrus SASL]     [Squirrel Mail]     [Asterisk PBX]     [Video For Linux]     [Photo]     [Yosemite News]     [gtk]     [KDE]     [Gimp on Windows]     [Steve's Art]

  Powered by Linux