Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen der Seite angezeigt.

--- snippets:apache:startssl_certificate [2014/04/17 16:43] – angelegt benh
+++ snippets:apache:startssl_certificate [2015/04/04 10:51] (aktuell) – benh
@@ Zeile 2: / Zeile 2: @@
 ===== for (and on) Uberspace =====
-  * generate private key (rsa 4096bit) <code bash>openssl genrsa -out startssl_test.feggm.de_ssl.key 4096</code>
+  * set domain variable <code bash>domain=test.feggm.de</code>
-  * generate certificate signing request (CSR) <code bash>openssl req -new -key startssl_test.feggm.de_ssl.key -out startssl_test.feggm.de_ssl.csr</code>
+  * generate private key (rsa 4096bit) <code bash>openssl genrsa -out startssl_${domain}_ssl.key 4096</code>
-  * get the certificate signed on [[https://www.startssl.com/|StartSSL]]
+  * generate certificate signing request (CSR) <code bash>openssl req -new -sha512 -key startssl_${domain}_ssl.key -out startssl_${domain}_ssl.csr</code>
-  * download intermediate certificate from StartSSL <code bash>wget https://www.startssl.com/certs/sub.class1.server.ca.pem</code>
+  * get the certificate signed on [[https://www.startssl.com/|StartSSL]] <code bash>
-  * generate combined certificate file for uberspace-support <code bash>uberspace-prepare-certificate -k startssl_test.feggm.de_ssl.key -c startssl_test.feggm.de_ssl.crt -i sub.class1.server.ca.pem</code>
+cat startssl_${domain}_ssl.csr
+vi startssl_${domain}_ssl.crt</code>
+  * download intermediate certificate from StartSSL <code bash>wget https://www.startssl.com/certs/class1/sha2/pem/sub.class1.server.sha2.ca.pem</code>
+  * generate combined certificate file for uberspace-support <code bash>uberspace-prepare-certificate -k startssl_${domain}_ssl.key -c startssl_${domain}_ssl.crt -i sub.class1.server.sha2.ca.pem</code>