Re: [nlug] Certificates question

2015-05-23 Thread Tilghman Lesher
First, generate the private key: openssl genrsa -out site.key 3072 Then generate the certificate signing request: openssl req -new -key site.key -out site.csr Upload the CSR file to the certificate authority for signing. One extra thing that I would also recommend is that you chmod the keyfile t

Re: [nlug] Certificates question

2015-05-23 Thread John F. Eldredge
What are the steps to take to generate a certificate request? On May 23, 2015 5:20:22 PM Tilghman Lesher wrote: If you want a free server certificate, you can obtain one at startssl.com, for one. Note that you have to first get your identity certificate, install it in your browser, then use

Re: [nlug] Certificates question

2015-05-23 Thread Tilghman Lesher
If you want a free server certificate, you can obtain one at startssl.com, for one. Note that you have to first get your identity certificate, install it in your browser, then use that to connect. You then can verify ownership of a domain and have a certificate signed. For security reasons, I hig

[nlug] Certificates question

2015-05-23 Thread John F. Eldredge
I want to try using my phone's Gmail app to read from my personal email account at jfeldredge.com. Unfortunately, it would seem that the Gmail app will not accept the self-signed certificate I have been using. I applied for, and received, a free email certificate issued by Comodo Inc. Looking