Infrastructure/infra-docs-fpo
1
0
Fork 0
Code Issues 100 Pull requests 6 Projects Releases Packages Wiki Activity Actions

Review making-ssl-certificates SOP

Browse source 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
This commit is contained in:
Michal Konečný 2021-09-06 16:25:29 +02:00
parent 533d806197
commit 7675a5e0b4
2 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/sysadmin_guide/nav.adoc
View file

@ -64,7 +64,7 @@
** xref:koschei.adoc[Koschei - SOP] ** xref:koschei.adoc[Koschei - SOP]
** xref:layered-image-buildsys.adoc[Layered Image Build System - SOP] ** xref:layered-image-buildsys.adoc[Layered Image Build System - SOP]
** xref:mailman.adoc[Mailman Infrastructure - SOP] ** xref:mailman.adoc[Mailman Infrastructure - SOP]
** xref:making-ssl-certificates.adoc[making-ssl-certificates - SOP in review ] ** xref:making-ssl-certificates.adoc[SSL Certificate Creation - SOP]
** xref:massupgrade.adoc[massupgrade - SOP in review ] ** xref:massupgrade.adoc[massupgrade - SOP in review ]
** xref:mastermirror.adoc[mastermirror - SOP in review ] ** xref:mastermirror.adoc[mastermirror - SOP in review ]
** xref:mbs.adoc[mbs - SOP in review ] ** xref:mbs.adoc[mbs - SOP in review ]

8
modules/sysadmin_guide/pages/making-ssl-certificates.adoc
View file

@ -3,16 +3,16 @@
Every now and then you will need to create an SSL certificate for a Every now and then you will need to create an SSL certificate for a
Fedora Service. Fedora Service.
== Creating a CSR for a new server. == Creating a CSR for a new server
Know your hostname, ie [.title-ref]##lists.fedoraproject.org##`: Know your hostname, ie _lists.fedoraproject.org_:
.... ....
export ssl_name=<fqdn of host> export ssl_name=<fqdn of host>
.... ....
Create the cert. 8192 does not work with various boxes so we use 4096 Create the cert. 8192 does not work with various boxes so we use 4096
currently.: currently.
.... ....
openssl genrsa -out ${ssl_name}.pem 4096 openssl genrsa -out ${ssl_name}.pem 4096
@ -36,7 +36,7 @@ An optional company name []:
send the CSR to the signing authority and wait for a cert. place all send the CSR to the signing authority and wait for a cert. place all
three into private directory so that you can make certs in the future. three into private directory so that you can make certs in the future.
== Creating a temporary self-signed certificate. == Creating a temporary self-signed certificate
Repeat the steps above but add in the following: Repeat the steps above but add in the following: