Changes

From SME Server
Jump to navigationJump to search
109 bytes removed ,  02:59, 16 August 2023
Line 60: Line 60:  
mkdir -p /etc/pki/koji/{certs,private,confs}
 
mkdir -p /etc/pki/koji/{certs,private,confs}
 
cd /etc/pki/koji
 
cd /etc/pki/koji
nano ssl.cnf
     −
</syntaxhighlight>and insert the following into ssl.conf
+
</syntaxhighlight>and create ssl.cnf<syntaxhighlight lang="ini">
 
+
cat <<_EOT > /etc/pki/koji/ssl.cnf
I suggest you change the defaults in [req_distinguished_name] to yours to make it easier when generating certs....
  −
{{Note box|I suggest you change the defaults in [req_distinguished_name] to yours to make it easier when generating certs....}}<syntaxhighlight lang="ini">
   
HOME                    = .
 
HOME                    = .
 
RANDFILE                = .rand
 
RANDFILE                = .rand
Line 141: Line 138:  
authorityKeyIdentifier          = keyid:always,issuer:always
 
authorityKeyIdentifier          = keyid:always,issuer:always
 
basicConstraints                = CA:true
 
basicConstraints                = CA:true
</syntaxhighlight>Create the ca key for the server<syntaxhighlight lang="bash">
+
_EOT
 +
</syntaxhighlight>{{Note box|I suggest you change the defaults in [req_distinguished_name] to yours to make it easier when generating certs....}}
 +
Create the ca key for the server<syntaxhighlight lang="bash">
 
touch index.txt
 
touch index.txt
 
echo 01 > serial
 
echo 01 > serial
381

edits

Navigation menu