Changes between Version 8 and Version 9 of configure-mosh-x509

Timestamp:

Dec 20, 2013, 8:02:21 PM (10 years ago)

Author:

Ross

Comment:

--

configure-mosh-x509

@@ -116 +116 @@
     If  it exists, remove it with 'rm $(hostname).mayfirst.org.key' <-- the  key may have a .DATE extension (remove that key as well)
 
-2.  Create a new key in /etc/ssl/private with the command `umask 177;  certtool -p > $(hostname).mayfirst.org.key.$(date +%F)` <-- umask here  creates the correct permissions for the key file.
+2.  Create a new key in /etc/ssl/private with the command `umask 177;  certtool -p > $(hostname).mayfirst.org.key.$(date +%F)` <-- umask here  creates the correct permissions for the key file.  '''Note:''' some versions of gnutls-bin (or certtool) add key info to the top of their output.  You'll want to verify the key created here and make sure it's clean, containing only the following:
+{{{
+-----BEGIN RSA PRIVATE KEY-----
+key data
+-----END RSA PRIVATE KEY-----
+}}}
 
 3.  Run the following command from /etc/ssl/private `umask 133;  certtool --generate-request --load-privkey  $(hostname).mayfirst.org.key.$(date +%F)`