About These Toolkits
I've found little bugs, on some distros, and had to tweak the things. I just saved them all. One of them should work
on almost any Linux system.
Assembling my signed certificates for Postfix
So, I generated my files and uploaded the .csr to NameCheap after buying a Comodo certificate. There are various instructions around
the web for using shell commands to properly assemble the certificates once you get your files from NameCheap - or wherever.
I suppose that if your were doing this remotely, in a terminal, you'd have to use this sort of method. For me, it was just
a lot simpler to use a graphical text editor to create my files - using these for Postix.
From NameCheap, anyway (this could vary based upon the issuer) I got a zip file which contained the following two files:
- mail_netkwik_com.ca-bundle
- mail_netkwik_com.crt
Okay - the following instructions use "mail.netkwik.whatever" - obviously, this varies on your domain name. Anyway, this is pretty damned simple.
- Create a new text file called "certificate_and_key.crt".
- Open mail_netkwik_com.crt (from NameCheap). Copy the contents and paste it at the top
of your new certificate_and_key.crt file.
- Open the "bundle" file, select all and copy, and paste it beneath the text you just pasted into the certificate_and_key.crt file.
- You should have originally generated a key file - eg. mail.netkwik.com.key. Copy the contents of this and paste it to the bottom of the certificate_and_key.crt file.
- Save this file.
- Upload this file, and, the bundle file to /etc/ssl/certs
- Upload the key file /etc/ssl/private.
- I chmod all of the files I copy to 777. Is this neccesary? I have no idea.
That's it.