371
edits
Changes
Jump to navigation
Jump to search
Line 60:
Line 60: − nano ssl.cnf − + − + − I suggest you change the defaults in [req_distinguished_name] to yours to make it easier when generating certs.... − {{Note box|I suggest you change the defaults in [req_distinguished_name] to yours to make it easier when generating certs....}}<syntaxhighlight lang="ini"> Line 141:
Line 138: − + + +
→Hub/Web Server
mkdir -p /etc/pki/koji/{certs,private,confs}
mkdir -p /etc/pki/koji/{certs,private,confs}
cd /etc/pki/koji
cd /etc/pki/koji
</syntaxhighlight>and insert the following into ssl.conf
</syntaxhighlight>and create ssl.cnf<syntaxhighlight lang="ini">
cat <<_EOT > /etc/pki/koji/ssl.cnf
HOME = .
HOME = .
RANDFILE = .rand
RANDFILE = .rand
authorityKeyIdentifier = keyid:always,issuer:always
authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = CA:true
basicConstraints = CA:true
</syntaxhighlight>Create the ca key for the server<syntaxhighlight lang="bash">
_EOT
</syntaxhighlight>{{Note box|I suggest you change the defaults in [req_distinguished_name] to yours to make it easier when generating certs....}}
Create the ca key for the server<syntaxhighlight lang="bash">
touch index.txt
touch index.txt
echo 01 > serial
echo 01 > serial