| | 40 | |
| | 41 | === SSL setup (7/13) === |
| | 42 | using this site as reference: http://www.debian-administration.org/article/Creating_and_Using_a_self_signed__SSL_Certificates_in_debian |
| | 43 | |
| | 44 | except renaming the switch key and cert to what it would understand: |
| | 45 | *ca_cert.pem |
| | 46 | *sw_cert.pem |
| | 47 | *sw_key.pem |
| | 48 | |
| | 49 | because in the example on the site ca_cert.pem is named cacert.pem, I had to change "cacert" to "ca_cert" in openssl.cnf for the very last part (signing the certificate): |
| | 50 | {{{ |
| | 51 | [ CA_default ] |
| | 52 | serial = $dir/serial |
| | 53 | database = $dir/index.txt |
| | 54 | new_certs_dir = $dir/newcerts |
| | 55 | certificate = $dir/cacert.pem |
| | 56 | private_key = $dir/private/cakey.pem |
| | 57 | default_days = 365 |
| | 58 | default_md = md5 |
| | 59 | preserve = no |
| | 60 | email_in_dn = no |
| | 61 | nameopt = default_ca |
| | 62 | certopt = default_ca |
| | 63 | policy = policy_match |
| | 64 | }}} |
| | 65 | I am not sure if changing the name of the key from ofpswitch.key.pem to sw_key.pem after making/signing the certification will affect anything. will find out. |