Re: [webmin-l] SSLopen - CA functions

[Robert M. <rg...@ht...>]

At 01:31 AM 3/8/2006, Jamie Cameron wrote:
>On Wed, 2006-03-08 at 01:29, Robert Moskowitz wrote:
> > Is there any plugin module to perform SSLopen and CA functions.
> >
> > Minimally I would like to replace
> >
> > openssl req -newkey rsa:512 -x509 -nodes -out cert.pem - keyout key.pem
> >
> > with a nice panel that allowed me to create a cert with content I
> > want in the directory of my choosing.
> >
> > The more OIDs supported the better.  At least those required for
> > standard servers/apps.
> >
> > PolicyConstraints and the like would be a nice touch!
> >
> > You already have the webmin/edit_ssl.cgi in Webmin Configuration.  It
> > does not seem like it would be much to  add a minimal cert creation module.
> >
> > For fuller CA functions would openCA.org provide modules?
> >
> > What would be really 'neat'  would be able to start my own 'CA'.  To
> > create my own, self-signed root cert and use it to create certs for
> > all of my webmin systems and general SSL certs.  I would then use
> > whatever tool to migrate them to the proper system.  Then I would
> > only need to install my root in my trusted root list and I am done.
> >
> > Also would be nice for SSH as well.
> >
>
>Have you had a look at the Certificate Manager module, available from
>http://www.webmin.com/download/modules/certmgr.wbm.gz ? It can create a
>CA and sign certificates, unlike the built-in Webmin 'SSL Encryption'
>page which just generates a self-signed cert.

I have installed the module and it is not able to 'create a CA'.

"This module allows you to manage SSL certificates installed on the 
system. With this module, self-signed certificates and certificate 
signing requests (CSR) can be generated. Certificates can be 
imported, exported, deleted and viewed. "

There is the ablility to specify a CA cert, but it only seems to be 
able to create self-signed certs.

So when I get home tomorrow, I am going to startup TinyCA2.




>  - Jamie
>
>
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by xPML, a groundbreaking scripting language
>that extends applications into web and mobile media. Attend the live webcast
>and join the prime developer group breaking into this new coding territory!
>http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
>-
>Forwarded by the Webmin mailing list at web...@li...
>To remove yourself from this list, go to
>http://lists.sourceforge.net/lists/listinfo/webadmin-list