1 For this exercise you must again be root. Login and obtain root privileges: sudo su
2 Create a working directory only accessible to root: mkdir ~/ca cd ~/ca chmod og rwx.
3 Install openssl if necessary aptitude install openssl
4 Consider copying /etc/openssl.cnf to ~/ca and edit it to reflect the local situation see today's slides
5 Create a script to create your CA see today's slides
6 Create a script to create your CA see today's slides Create your own CA (use a good passphrase!)
7 Create a script to create a server key and signing request See today's slides Create a key and signing request for your mail server
8 Create a script to sign a server certificate, using the provided signing request See today's slides Create the signed certificate for your mail server
9 Do the same (create key and signing request, and create certificate from signing request) for a non server (client) certificate Create a signed client certificate for your mail server
10 Assume your neighbor represents the CA Create a key and signing request for your mail server, and let your neighbor create the signed certificate In addition to the signed certificate, what should the CA also provide you with?
1 For this exercise you must again be root. Login and obtain root privileges: sudo su
2 Create a working directory only accessible to root: mkdir ~/ca cd ~/ca chmod og rwx.
3 Install openssl if necessary aptitude install openssl
4 Consider copying /etc/openssl.cnf to ~/ca and edit it to reflect the local situation see today's slides
5 Create a script to create your CA see today's slides
6 Create a script to create your CA see today's slides Create your own CA (use a good passphrase!)
7 Create a script to create a server key and signing request See today's slides Create a key and signing request for your mail server
8 Create a script to sign a server certificate, using the provided signing request See today's slides Create the signed certificate for your mail server
9 Do the same (create key and signing request, and create certificate from signing request) for a non server (client) certificate Create a signed client certificate for your mail server
10 Assume your neighbor represents the CA Create a key and signing request for your mail server, and let your neighbor create the signed certificate In addition to the signed certificate, what should the CA also provide you with?