[ILUG] auto generating ssl certs

[Peter McEvoy]

On Mon, Jul 26, 2004 at 03:20:43PM +0100, John P. Looney wrote:
>  Anyone come across software to make up SSL Certs ? Something like a web
> form that collects data, then feeds it to openssl a few times, and ends up
> with a non encrypted private key & a CSR file.

I dont know anything to do it automatically, but I've made a few self
signed certs using the following:


# make the certificate request
openssl req -new > your.domain.csr

# remove the password
openssl rsa -in privkey.pem -out your.domain.key

# sign it (good for 2 years)
openssl x509 -in your.domain.csr -out your.domain.cert -req -signkey
your.domain.key -days 730

If you want a .pem file, like debian apache-ssl does, you need to cat
the .cert >> onto the .key file, afaicr.

This worked for me, ymmv.

Cheers
--
Pete