ClueNet:SSL Certificates

From ClueWiki

Cluenet may provide official servers with certificates signed by the Cluenet CA. To get a signed certificate, you must first generate a CSR and a key. One way to do this is by using the openssl command. First, create a configuration file, openssl.cnf.

Then, this command will generate a CSR. When it asks for for a Common Name (CN), be sure to enter the server's full, Cluenet hostname, also replace myhost with the server name and direct the command to the correct location of openssl.cnf:

$ openssl req -outform pem -out myhost.cluenet.org.csr -newkey rsa:1024 -keyout myhost.cluenet.org.key -nodes -config /path/to/openssl.cnf

The .csr file should be given to an admin to sign the certificate, but the .key file is private, and should be protected.