Re: [courier-users] ssl certificate usage
Brought to you by:
mrsam
From: Marco K. <mar...@ui...> - 2008-04-24 23:53:29
|
Sam wrote >> >> I bought a certificate that is already working with apache22. >> >> Additional I want to get rid of the warning message in emailsclients that >> the ssl cert is not good ... >> >> is it possible to use the same ssl certs as i use with apache? >> >> the dir with the ssl look like that >> -rw-r--r-- 1 root root 4603 2008-03-18 22:39 gd_intermediate_bundle.crt >> -rw-r--r-- 1 root root 1814 2008-03-18 22:42 mymachine.crt >> -rw-r--r-- 1 root root 887 2008-03-18 21:32 myserver.key >> -rw-r--r-- 1 root root 794 2008-03-18 21:32 server.csr > >Run openssl x509 -inform der -outform pem -in myserver.key -out >myserver.pem > >Then, repeat the same command for mymachine.crt, and >gt_intermediate_bundle.crt. > >Then, take the resulting three .pem files, and concatenate them together. I >do not recall offhand the correct order, but I believe it should be: your >key, your pem, the intermediate pem. Take the resulting single file, and >specify it as TLS_CERTFILE. > the command does not work out openssl x509 -inform der -outform pem -in myserver.key -out myserver.pem unable to load certificate 6266:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1296: 6266:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509 or openssl x509 -inform der -outform pem -in gd_intermediate_bundle.crt -out gd_intermediate_bundle.pem unable to load certificate 6267:error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag:tasn_dec.c:1296: 6267:error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 error:tasn_dec.c:380:Type=X509 Any ideas? Marco |