Idefix's FAQ

Sendmail und TLS

- Edit /etc/ssl/openssl.cfn -> default_days    = 1825
- Generate CAcertificate
-> CA.pl -newca

: RSA
openssl req -newkey rsa:1024 -keyout key.pem -nodes -x509 -days 365 -out cert.pem

: DSA
openssl dsaparam 1024 -out dsa1024.pem
openssl req -x509 -nodes -newkey dsa:dsa1024.pem -out mycert.pem -keyout mykey.pem

: View Certificates
openssl x509 -noout -text -in  .pem

cat key.pem cert.pem >sendmail.pem

cp sendmail.pem /etc/mail/certs
cp demoCA/cacert.pem /etc/mail/certs

Sendmail:

define(`confCACERT_PATH',`/etc/mail/certs')
define(`confCACERT',`/etc/mail/certs/cacert.pem')
define(`confSERVER_CERT',`/etc/mail/certs/sendmail.pem')
define(`confSERVER_KEY',`/etc/mail/certs/sendmail.pem')
define(`confCLIENT_CERT',`/etc/mail/certs/sendmail.pem')
define(`confCLIENT_KEY',`/etc/mail/certs/sendmail.pem')

DAEMON_OPTIONS(`Port=smtp, Name=MTA')dnl
DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl


: Add client CERTS to me
/etc/mail/certs
C=FileName_of_CA_Certificate
ln -s $C `openssl x509 -noout -hash < $C`.0

One Time Passwords with FreeBSD 5.x

Subversion