Tag: ssl

Generating an SSL CSR and key

To generate an SSL certificate signing request (CSR) with key you can do this: openssl req -nodes -newkey rsa:2048 -keyout bla.key -out bla.csr Read More »
By halfgaar, 7 years ago, on May 10, 2012, at 15:05 | Comments closed

Installing a commercial SSL certificate in Zimbra

I installed a commercial (free) SSL certificate from Startcom SSL in Zimbra. I basically followed this, except the java keytool thing. I don't know why that is necessary... I did this on Zimbra 6.0.10_GA_2692.UBUNTU8_64 UBUNTU8_64 FOSS edition. Read More »
By halfgaar, 9 years ago, on April 12, 2011, at 20:04 | 3 comments

Testing an OpenSSL connection

Simple command to test an SSL connection: openssl s_client -connect meel.halfgaar.net:993 -ssl3 Read More »
By halfgaar, 9 years ago, on February 25, 2011, at 13:02 | Comments closed

Enabling authentication and SSL for Postfix on Debian

I used this document as main source. This blogpost is also useful. Read More »
By halfgaar, 9 years ago, on September 20, 2010, at 16:09 | Comments closed

Changing an apache virtual host to ssl

To change a virtual host in apache to ssl: #Redirect all normal traffic to the https site. RewriteEngine on RewriteRule ^/(.*) https://%{HTTP_HOST}/$1 [L,R] Read More »
By halfgaar, 9 years ago, on September 07, 2010, at 15:09 | Comments closed

Generating key and certificate for courier-imap

To create a self-signed certificate for courier-imap: openssl req -new -x509 -days 3650 -nodes -out imapd.pem -keyout imapd.pem Read More »
By halfgaar, 9 years ago, on September 04, 2010, at 11:09 | Comments closed

Generating a self-signed SSL certificate

openssl req -nodes -newkey rsa:2048 -keyout server.key -out server.csr openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt Read More »
By halfgaar, 9 years ago, on May 16, 2010, at 23:05 | Comments closed

Show fields in a SSL certificate with openssl

To use OpenSSL to get the certficate information (source): Read More »
By halfgaar, 10 years ago, on March 23, 2010, at 13:03 | Comments closed