Changes between Version 4 and Version 5 of configure-mosh-x509
- Timestamp:
- Dec 19, 2013, 9:16:36 PM (10 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
configure-mosh-x509
v4 v5 97 97 1. from `root@SERVERNAME.mayfirst.org:/etc/ssl/private` look for SERVERNAME.mayfirst.org.key (ls -l) 98 98 99 If it exists, remove it with 'rm SERVERNAME.mayfirst.org.key' <-- the key may have a .DATE extension (remove that key as well)99 If it exists, remove it with 'rm $(hostname).mayfirst.org.key' <-- the key may have a .DATE extension (remove that key as well) 100 100 101 2. Create a new key in /etc/ssl/private with the command `umask 177; certtool -p > SERVERNAME.mayfirst.org.key.$(date +%F)` <-- umask here creates the correct permissions for the key file.101 2. Create a new key in /etc/ssl/private with the command `umask 177; certtool -p > $(hostname).mayfirst.org.key.$(date +%F)` <-- umask here creates the correct permissions for the key file. 102 102 103 3. Run the following command from /etc/ssl/private `umask 133; certtool --generate-request --load-privkey SERVER_NAME.mayfirst.org.key.$(date +%F)`103 3. Run the following command from /etc/ssl/private `umask 133; certtool --generate-request --load-privkey $(hostname).mayfirst.org.key.$(date +%F)` 104 104 * a. Enter the correct values for the signing request 105 105