Page 1 of 1
Creating an SSL cert for virtual domains?
Posted: Sat Mar 01, 2008 5:58 am
by Kieran Huggins
I'm a little stumped here, I followed
a guide to set up an Ubuntu Dapper slice that included support for virtual domains for Courier IMAP over SSL, and everything is working nicely... sortof.
Unfortunately, t-bird keeps complaining that the SSL certificate is signed for "localhost", and not for any of the virtual domains I'm connecting to. It still works, but the error is exceptionally annoying.
Anyone here know how to create an openSSL cert that's signed for a domain?
Re: Creating an SSL cert for virtual domains?
Posted: Sat Mar 01, 2008 10:50 am
by Christopher
Have you gone through the steps of creating a KEY and CSR with the domain information in it?
Re: Creating an SSL cert for virtual domains?
Posted: Thu Mar 06, 2008 6:05 am
by Jenk
As above, you have to create a key per domain.
Re: Creating an SSL cert for virtual domains?
Posted: Thu Mar 06, 2008 3:03 pm
by Kieran Huggins
I ran the following (from the guide):
Code: Select all
openssl req -new -outform PEM -out smtpd.cert -newkey rsa:2048 -nodes -keyout smtpd.key -keyform PEM -days 365 -x509
Re: Creating an SSL cert for virtual domains?
Posted: Thu Mar 06, 2008 3:29 pm
by Christopher
It asks a bunch of questions when you create a CSR from a KEY, what did you tell it?
Re: Creating an SSL cert for virtual domains?
Posted: Fri Mar 07, 2008 3:39 pm
by Kieran Huggins
Code: Select all
Country Name (2 letter code) [AU]: CA
State or Province Name (full name) [Some-State]: Ontario
Locality Name (eg, city) []: Toronto
Organization Name (eg, company) [Internet Widgits Pty Ltd]: <Company Name>
Organizational Unit Name (eg, section) []: <blank>
Common Name (eg, YOUR name) []: Kieran Huggins
Email Address []: <email address>
another question would be: can I create SSL certs for multiple domains like this? Are they cumulative?
Re: Creating an SSL cert for virtual domains?
Posted: Fri Mar 07, 2008 4:09 pm
by bertfour
AFAIK you can only use ONE certificate per IP address....
Re: Creating an SSL cert for virtual domains?
Posted: Fri Mar 07, 2008 4:45 pm
by Christopher
Kieran Huggins wrote:another question would be: can I create SSL certs for multiple domains like this? Are they cumulative?
Somewhere you tell it what your domain name is? Did you do that. You create certificates by domain name.