<?xml version="1.0" encoding="koi8-r"?>
<rss version="0.91">
<channel>
    <title>OpenForum RSS: самоподписанный сертификат не работает как нужно</title>
    <link>https://opennet.dev/openforum/vsluhforumID1/86548.html</link>
    <description>Добрый день! Подскажите плиз!&lt;br&gt;&lt;br&gt;Делаю сертификат для qpopper+TLS, его конф сразу:&lt;br&gt;bash-2.05b# more /usr/local/etc/qpopper/qpopper.conf&lt;br&gt;set tls-version = default&lt;br&gt;set debug = true&lt;br&gt;set tls-support = stls&lt;br&gt;set tls-private-key-file     = /etc/mail/certs/rsa-key.pem&lt;br&gt;set tls-server-cert-file = /etc/mail/certs/cert.pem&lt;br&gt;set chunky-writes = tls&lt;br&gt;&lt;br&gt;в inetd.conf:&lt;br&gt;pop3 stream tcp nowait  root /usr/local/libexec/qpopper  qpopper -s -l 1 -p 4 -f /usr/local/etc/qpopper/qpopper.conf&lt;br&gt;&lt;br&gt;Делаю как всегда:&lt;br&gt;bash-2.05b# cd /etc/mail/certs&lt;br&gt;bash-2.05b# openssl req -new -nodes -out req.pem -keyout cert.pem&lt;br&gt;bash-2.05b# chmod 600 cert.pem&lt;br&gt;bash-2.05b# chown root:wheel cert.pem&lt;br&gt;bash-2.05b# openssl genrsa -des3 -out ca.key 1024&lt;br&gt;bash-2.05b# openssl req -new -x509 -days 1095 -key ca.key -out ca.crt&lt;br&gt;bash-2.05b# openssl x509 -req -CA ca.crt -CAkey ca.key -days 1095 -in req.pem -out signed.pem -CAcreateserial&lt;br&gt;bash-2.05b# cat signed.pem&amp;gt;&amp;gt;cert.pem&lt;br&gt;&lt;br&gt;Получаю файл:&lt;br&gt;bash-2.05b#  more cert.pem&lt;br&gt;-----BEGIN RSA PRIVATE KEY-----&lt;br&gt;....</description>

<item>
    <title>самоподписанный сертификат не работает как нужно (ALex_hha)</title>
    <link>https://opennet.dev/openforum/vsluhforumID1/86548.html#1</link>
    <pubDate>Thu, 10 Sep 2009 21:06:17 GMT</pubDate>
    <description>посмотри здесь http://www.sys-adm.org.ua/security/ssl-howto.php&lt;br&gt;</description>
</item>

</channel>
</rss>
