1
1
I have .key
file which holds the private key data, .crt
file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right?
Not exactly. In order to achieve my goal I must also generate cakey.pem and cacert.pem, which I do not know what they are for.
I have example with setting up TLS with Postfix MTA.
I do:
openssl genrsa 1024 > smtpd.key
openssl req -new -key smtpd.key -x509 -days 3650 -out smtpd.crt
these two - smtpd.key and smtpd.crt - are key (private key) and certificate (with public key incorporated).
what is the
openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
cakey.pem and cacert.pem files for?
I think I do need CA. If I, for example, omit to specify smtpd_tls_CAfile, it wont work. here is reference
– greenV – 2014-04-26T09:40:28.650Well, the guide is broken. The way the certificates are generated, they have no relation whatsoever. I’ll edit the post to include a guide from Parallels. – Daniel B – 2014-04-26T09:53:41.797
true for broken guide and also for generating CA. Thank you! – greenV – 2014-04-26T18:09:28.787