SSL Certificates with OpenSSL

[heat]

Hi all,

how can I create SSL certificates with OpenSSL on the command line. I googled a little bit, but this is all very confusing to me so I'd appreciate a clear set of instructions...

[falko]

Something like this should work:

openssl genrsa -des3 -passout pass:yourpassword -out /path/to/your/key_file 1024
openssl req -new -passin pass:yourpassword -passout pass:yourpassword -key /path/to/your/key_file -out /path/to/your/csr_file -days 365
openssl req -x509 -passin pass:yourpassword -passout pass:yourpassword -key /path/to/your/key_file -in /path/to/your/csr_file -out /path/to/your/crt_file -days 365
openssl rsa -passin pass:yourpassword -in /path/to/your/key_file -out /path/to/your/key_file2
chmod 400 /path/to/your/key_file2

[yalgashev]

Hi, all!
I use openssl to sign erificate request by this way:
openssl ca -passin pass:5234590 -policy policy_match -out 1.crt -infiles 1.csr
Please help me: how to generate certificate that should just protect email?
Sorry for my bad English

Thanks for advises!

[falko]

The procedure is the same.