[ILUG] auto generating ssl certs

[John P. Looney]

On Tue, Jul 27, 2004 at 11:40:00AM +0100, Enda mentioned:
> The key generation must be done by the webserver, or within the webserver
> rulesets, so for example, if you wanted to SSL enable a netscape server, you
> couldnt generate an arbitary cert and import it in and have SSL working
> perfectly as the public key in the cert wouldnt necessarily match a private
> key in the webserver, you would first have to use netscapes keygeneration
> programs to generate a public and private key pair and it will automatically
> add the private key to its keychain etc, and produce a certificate template
> with the public key and produce a CSR.

 Damn, that's convoluted.

 All I want is something that'll make the unsigned cert and the csr, for
apache or IIS. You have to be a developer to make something so simple so
complex...

 As was pointed out, it's a pair of openssl commands, with some simple PHP
to hide their invocation. No webservers needed.

John