Creating and self-signing your own certificate

Top  Previous  Next

To create and self-sign a certificate using OpenSSL, you can issue, from a MSDOS command prompt, the following command:
 
openssl req -new -x509 -keyout key.pem -out cert.pem -nodes -days 3650

 

When following the prompts to generate the certificate, please note that when asked for the "Common Name", you should enter the DNS name of the server you are installing the certificate on, ex: mail.logsat.com.

 

Now that you created and signed your own certificate, you will have the files key.pem and cert.pem. SpamFilter also needs the CA certificate. As you signed your own certificate, the CA is certificate will be the same as your public certificate. So simply copy/paste the file cert.pem to root.pem. Place all three files (key.pem, cert.pem and root.pem) in the SpamFilter directory and restart SpamFilter to activate the certificates.