Use certtool instead of openssl. It is less flexible but much more user friendly.1. Installation:Certtool is part of GnuTLS. On debian-based distributions you have to install the gnutls-bin package.2. Create a private key:# certtool -p –outfile server.key.pem3. Generate the self signed certificate:# certtool -s –load-privkey server.key.pem –outfile server.crt.pemYou will get a prompt to enter various […]
Lighttpd – HowToSimpleSSL – lighty labs
Setting up a simple SSL configuration¶ Setting up a simple SSL configuration with Lighttpd is quite easy. Though this method should be used with care because this setup will only provide proper encryption, not authentication! The user will be presented with a query whether to accept the certificate or not! First, go into your SSL […]
SSL fingerprints mailserver : SMG’s Weblog
SSL fingerprints mailserver I use fetchmail to pull down my mail from the mailserver, just now the ssl fingerprints changed leading to an error like: fetchmail: <mailserver> fingerprints do not match! 12096:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:../../../../common/openssl/ssl/s3_clnt.c:894: fetchmail: SSL connection failed. fetchmail: socket error while fetching from <userid>@<mailserver> fetchmail: Query status=2 (SOCKET) So to get the new […]