SSL Certificate question.

[Richard Mcintyre]

Okay, so I'm a bit slow on the uptake but I figured out that the PEM1 
and PEM2 commands are supposed to be preceeded by set in my shell.

I have now generated the new certificate, but how do I get sendmail to 
recognize it? I have even built sendmail from the src on my local 
machine. for some reason it's still utilizing the old openssl 
certificate that I generated over a year ago (even though the actual 
file was removed before I ran the commands below.

Your help is appreciated.
~REM

Richard Mcintyre wrote:

> All,
>
> I'm usually just a lurker on this list but I ran into a small problem. 
> I recently found out that the SSL certificate I created for my 
> sendmail server has expired. I need to update it. I was following 
> along with the suggestions at 
> http://veldt.com/2003/08/smtp-auth-ssl-with-sendmail-freebsd/ but I 
> ran into a problem, I was hoping I could just generate a new 
> certificate with the following commands:
>
> "next, you’ll need to generate certificates for sendmail to use.
> mkdir /etc/mail/certs
> cd /etc/mail/certs
> mktemp /tmp/openssl.XXXXX1
> mktemp /tmp/openssl.XXXXX2
> PEM1='/tmp/openssl.XXXXX1'
> PEM2='/tmp/openssl.XXXXX2'
> openssl req -newkey rsa:1024 -keyout $PEM1 \
> -nodes -x509 -days 365 -out $PEM2
> cat $PEM1 > sendmail.pem
> echo "" >> sendmail.pem
> cat $PEM2 >> sendmail.pem
> cp $PEM2 ca-bundle.crt
> rm $PEM1 $PEM2
> chmod 400 sendmail.pem
> chmod 400 ca-bundle.crt
> "
>
>
> I ran into some problems around "PEM1='/tmp'openssl.XXXXX1' for some 
> reason FreeBSD is now seeing this as a command, and is responding 
> "PEM1=/tmp/openssl.XXXXX1: Command not found." I am certain that these 
> are the commands I ran the first time (04/12/2004) to create the 
> certificates, why aren't they working now?
>
> Thanks for your help...
>
> tco2# uname -a
> FreeBSD tco2.iaminsane.net 5.2.1-RELEASE FreeBSD 5.2.1-RELEASE #0: Fri 
> Apr 23 07:02:47 EDT 2004 
> rem at tco2.iaminsane.net:/usr/src/sys/i386/compile/REM_0.0.3 i386
>
>
> ~REM
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"