diff options
author | Jonas Smedegaard <dr@jones.dk> | 2002-12-26 01:09:05 +0000 |
---|---|---|
committer | Jonas Smedegaard <dr@jones.dk> | 2002-12-26 01:09:05 +0000 |
commit | 4d5e01691573bcf0893fd5afef126eab6742a092 (patch) | |
tree | 80b744cbf44d368586ecfe497bc173a6099fceee /doc/Certificates.txt | |
parent | a62591e963a1875be29013927382781eb14486b0 (diff) |
Add new area doc for chunks of more or less structured knowledge related to the scripts and configfiles.
Diffstat (limited to 'doc/Certificates.txt')
-rw-r--r-- | doc/Certificates.txt | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/doc/Certificates.txt b/doc/Certificates.txt new file mode 100644 index 0000000..8c7acf7 --- /dev/null +++ b/doc/Certificates.txt @@ -0,0 +1,27 @@ +Certificate Authority +--------------------- +CA Certificate is placed in /etc/ssl/certs/ and name closely to CN of +organisation ( s/ /_/g ) appended "_CA.crt". + +CA Key is located in /etc/ssl/private/ named similarly appended +"_CA.key". + +Certificate is symlinked to "/etc/ssl/certs/cacert.pem" for easy +locating by scripts. + +Hosts +----- +Host certificates are placed in /etc/ssl/certs/ either named by the +service they provide appended ".pem", or symlinked with that name from +hostname.key or whatever makes best sense in the situation, either with +the key embedded or the key at the same place. + +The script /usr/share/local/localmksslcerts can be used to make +self-signed certificates with embedded keys. + +Users +----- +Have a look at this web page: +http://www.cise.ufl.edu/help/secure-access/ssl-mail-setup.shtml + +The script is at /usr/share/local/mycert - adapted to Debian GNU/Linux. |