key rollover: Generic OpenSSL PEM instructions
Hi,
please add this to the top next to OpenSSH, since it can be referenced
by the instructions for several other packages.
OpenSSL: Generic PEM key generation instructions
================================================
This is just a reminder for those who (re-)generate PEM encoded
certificates. Your site probably has other policies in place about how
to manage keys which you should follow. Additionally, you may need to
get the certificates signed again by a 3rd party Certificate Authority
rather than by using a self-signed certificate as shown below:
cd /etc/ssl/private
openssl genrsa 1024 > mysite.pem
cd /etc/ssl/certs
openssl req -new -key ../private/mysite.pem -x509 -days 9999 -out mysite.pem
Reply to: