Re: create keys and certificates for postfix/tls

[Marco Beishuizen <mbeis%xs4all.nl@localhost>]

On Mon, 29 Feb 2016, the wise Lucius Rizzo wrote:

> You have a few options. All involve the use of openssl to generate key 
> or csr
>
> See https://www.madboa.com/geek/openssl/
>
> 1. Create a self signed cert and point Postfix to use ssl key and pem 
> which was self generated 2. Use letsencrypt (HIGHLY recommended). IMHO, 
> the introduction of letsencrypt will kill the basic ssl cert signed 
> market. 3. Get a signed cert from namecheap. (You can alway buy a 
> throwaway domain and add positivessl cert for a year for US $1.99

Thanks for the link. I was able to create a self signed cert. After that I 
got the famous "unable to get local certificates" warning in Alpine. 
Solved this by just copying all certs and symlinks from my FreeBSD machine 
to the NetBSD machine and now it the SSL stuff works.

Thanks for the help!

Regards,
Marco

--
Cohen's Law:
	There is no bottom to worse.