SSL Mass-Check

Here are the commands required to create a client and server certificate for
--cs_ssl with --client and --server:

openssl genrsa -out ca-key.pem 2048

openssl req -new -x509 -nodes -days 9000 -key ca-key.pem -out ca-cert.pem

openssl req -newkey rsa:2048 -days 9000 -nodes \
  -keyout server-key.pem -out server-req.pem

openssl x509 -req -in server-req.pem -days 9000 -CA ca-cert.pem \
  -CAkey ca-key.pem -set_serial 01 -out server-cert.pem

openssl req -newkey rsa:2048 -days 9000 -nodes \
  -keyout client-key.pem -out client-req.pem

openssl x509 -req -in client-req.pem -days 9000 -CA ca-cert.pem \
  -CAkey ca-key.pem -set_serial 01 -out client-cert.pem

mv server-key.pem server-cert.pem [server_masses_dir]/spamassassin/

mv client-key.pem client-cert.pem [client_masses_dir]/spamassassin/
  • No labels