View Single Post
  #2  
Old 26th May 2013, 00:02
yucktoufoo yucktoufoo is offline
Member
 
Join Date: Feb 2011
Posts: 36
Thanks: 1
Thanked 1 Time in 1 Post
Default

I assume you mean a self signed certificate? If so, by running this command, when prompted for Common Name set it to mail.yourdomain.com


Code:
openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 365
That will sign a cert for 365 days, if you dont want a passphrase on the key (which you probably dont if the cert is for a mailserver), add the -nodes option.

Don't forget to make sure the permissions are correct on your key file.
Reply With Quote