Certificate Signing Request

[Chris Felix]

I've installed the latest versions. All is working. The only issue I seem to be having is that when I go to generate a CSR, I put in all my info and I see a message that the CSR was generated. However, the key is not displayed.

How do I go about fixing that??

[David Gnojek]

Hi Chris,

thanks for info. Have you installed devel-5.4 or last stable v5.3?

Following trick worked me. Open file /var/mailserv/admin/lib/certificate.rb and locate the function block gen_src(..). Replace there this the line:

  %x{/usr/sbin/openssl req -new -key #{@keyfile} -subj #{subj} 2>/dev/null}.strip

with this:

  Sudo.exec("/usr/sbin/openssl req -new -key #{@keyfile} -subj \"#{subj}\"  2>/dev/null").strip
  

Cheers

David

On Thu, Nov 21, 2013 at 11:36 AM, Chris Felix <chris...@gmail.com> wrote:

I've installed the latest versions. All is working. The only issue I seem to be having is that when I go to generate a CSR, I put in all my info and I see a message that the CSR was generated. However, the key is not displayed.

How do I go about fixing that??

--
You received this message because you are subscribed to the Google Groups "mailserv" group.
To unsubscribe from this group and stop receiving emails from it, send an email to mailserv+u...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

[David Gnojek]

Hi Chris,

thanks for info. Have you installed devel-5.4 or last stable v5.3?

Following trick worked me. Open file /var/mailserv/admin/lib/certificate.rb and locate the function block gen_csr(..). Replace there this  line:

  %x{/usr/sbin/openssl req -new -key #{@keyfile} -subj #{subj} 2>/dev/null}.strip

with this:

  Sudo.exec("/usr/sbin/openssl req -new -key #{@keyfile} -subj \"#{subj}\"  2>/dev/null").strip
  

Cheers

On Thu, Nov 21, 2013 at 11:36 AM, Chris Felix <chris...@gmail.com> wrote:

I've installed the latest versions. All is working. The only issue I seem to be having is that when I go to generate a CSR, I put in all my info and I see a message that the CSR was generated. However, the key is not displayed.

How do I go about fixing that??

--

[Chris Felix]

David,

Thanks for the help. That seemed to fix my issue.

[Marcus Bointon]

On 24 Sep 2014, at 17:55, Andy <geew...@gmail.com> wrote:

I have the same issue, and I have tried the trick that David stated but that doesn't appear to have fixed it for me.  Any other suggestions or are there any instructions on how to do the process manually?

Generating keys and CSRs manually is pretty easy from anywhere you have OpenSSL installed:

openssl req -out example.com.csr -sha256 -new -newkey rsa:2048 -nodes -keyout example.com.key

After you answer the questions that will generate a 2048-bit key and a CSR. Note that it's using an SHA2 key, which may not be supported in some older browsers, but you should consider using it since SHA1 is now widely deprecated and not considered secure.

Marcus

[Andy]

Thank you!!!!  That works for me.  I restarted the server and the gui worked but then the CSR didn't have a properly formatted email address so I did it manually and we are all good.