Changes for page Server-Zertifikat

Last modified by Michael Oberrauch on 2025/11/03 18:42
From version 22.1
edited by Leo Fahrbach
on 2025/08/14 12:51
Change comment: There is no comment for this version
To version 20.1
edited by Leo Fahrbach
on 2025/08/14 10:29
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -140,10 +140,11 @@
140 140   mkdir -pm700 /var/lib/rbg-cert/live/ # certs will be here
141 141   cd /var/lib/rbg-cert/live/
142 142  
143 - # Private Key erstellen
144 - openssl genrsa -out $UQN.privkey.pem 4096
145 -
146 - openssl rsa -in $UQN.privkey.pem -pubout
143 + openssl genpkey -algorithm x25519 -out $UQN.privkey.pem
144 + # Falls RSA benötigt wird: openssl genrsa -out $UQN.privkey.pem 4096
145 +
146 + openssl pkey -in $UQN.privkey.pem -pubout
147 + # für RSA: openssl rsa -in $UQN.privkey.pem -pubout
147 147   # Diesen pubkey dann in der StrukturDB für PIRA registrieren
148 148  
149 149  `rbg-cert` und systemd timer/service sind von einer aktuellen Ubuntu-VM zu kopieren.