ssl-cert package (certificados auto-assinados) para rpm / fedora

Question

No Debian / Ubuntu, meus pacotes deb dependem do pacote ssl-cert , para fornecer alguns certificados https auto-assinados, se nada mais. Da página Debian :

This package enables unattended installs of packages that need to create SSL certificates.

It is a simple wrapper for OpenSSL's certificate request utility that feeds it with the correct user variables.

Existe um pacote similar para o rpm / Fedora?

    

Answer 1

Acontece que a instalação do pacote mod_ssl criará automaticamente alguns certificados autoassinados, com um arquivo de configuração pronto para uso

/etc/httpd/conf.d/ssl.conf

Funciona muito bem, sem necessidade de criar certificados manualmente. A configuração é assim:

#   Server Certificate:
# Point SSLCertificateFile at a PEM encoded certificate.  If
# the certificate is encrypted, then you will be prompted for a
# pass phrase.  Note that a kill -HUP will prompt again.  A new
# certificate can be generated using the genkey(1) command.
SSLCertificateFile /etc/pki/tls/certs/localhost.crt

#   Server Private Key:
#   If the key is not combined with the certificate, use this
#   directive to point at the key file.  Keep in mind that if
#   you've both a RSA and a DSA private key you can configure
#   both in parallel (to also allow the use of DSA ciphers, etc.)
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

#   Server Certificate Chain:
#   Point SSLCertificateChainFile at a file containing the
#   concatenation of PEM encoded CA certificates which form the
#   certificate chain for the server certificate. Alternatively
#   the referenced file can be the same as SSLCertificateFile
#   when the CA certificates are directly appended to the server
#   certificate for convinience.
#SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt

#   Certificate Authority (CA):
#   Set the CA certificate verification path where to find CA
#   certificates for client authentication or alternatively one
#   huge file containing all of them (file must be PEM encoded)
#SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt

    

Answer 2

O pacote Fedora openssl inclui /etc/pki/tls/certs/make-dummy-crt , que pode ser usado para gerar certificados auto-assinados. Por exemplo:

# cd /etc/pki/tls/certs
# ./make-dummy-cert mydummy.crt
# ls
ca-bundle.crt  ca-bundle.trust.crt  make-dummy-cert  Makefile  mydummy.crt