On Tue, Aug 12, 2014 at 11:24:40AM +0530, Thulasi Goriparthi wrote:

> $ openssl genrsa 2048 > key.pem

Don't forget "umask 077" before that.  Otherwise, the key file is often
world-readable.  With AFS, "fs setacl . ..." to restrict access to the
containing directory.

-- 
        Viktor.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to