| View previous topic :: View next topic |
| Author |
Message |
MasquedAvenger
Guru
Joined: 21 Aug 2003
Posts: 559
Location: Southern California
|
 Posted: Sat Oct 15, 2005 3:54 pm Post subject: Generating OpenSSL Certs WITHOUT a password [SOLVED] |
 |
|
Hey everyone. Does anyone know how I can generate an Open SSL certificate WITHOUT a password using the command line? I found this in the FreeBSD documentation (applying it to my Gentoo install):
| Code: |
# openssl req -new -nodes -out req.pem -keyout cert.pem
# openssl dsaparam -rand -genkey -out myRSA.key 1024
# openssl gendsa -des3 -out myca.key myRSA.key
# openssl req -new -x509 -days 365 -key myca.key -out new.crt
|
However, the third command (openssl gendsa -des3 -out myca.key myRSA.key) requires a password. I used to be able to type nothing, but now it's suddenly requiring me to enter at least 4 characters (which I don't think it ever did before.) I've tried using a cert that has a password, but it requires me to enter one every single time I restart an SSL-encrypted daemon (and this isn't good when you need to be able to restart the machine remotely.) Anybody know how I can do this minus the password? Thanks.
James
_________________
"There are no uninteresting things; only uninterested people." --G.K. Chesterton
Last edited by MasquedAvenger on Fri Oct 21, 2005 8:32 am; edited 2 times in total |
|
| Back to top |
|
 |
MasquedAvenger
Guru
Joined: 21 Aug 2003
Posts: 559
Location: Southern California
|
| Posted: Sat Oct 15, 2005 4:04 pm Post subject: |
|
|
By the way, I've already tried changing /etc/ssl/openssl.cnf. That doesn't work.
James
_________________
"There are no uninteresting things; only uninterested people." --G.K. Chesterton |
|
| Back to top |
|
|
MasquedAvenger
Guru
Joined: 21 Aug 2003
Posts: 559
Location: Southern California
|
| Posted: Fri Oct 21, 2005 8:31 am Post subject: |
|
|
Solved  Thanks to my good friend David. Here's the original command where I had the problem:
| Code: | | # openssl gendsa -des3 -out myca.key myRSA.key |
Here's what the command should have been to get it to not ask for a password:
| Code: | | # openssl gendsa -out myca.key myRSA.key |
The -des3 option was what was making it require a password.
James
_________________
"There are no uninteresting things; only uninterested people." --G.K. Chesterton |
|
| Back to top |
|
|
|
Networking & Security
