{{>toc}}

h1. CACert

h2. Verificateurs

https://www.ssllabs.com/ssltest/index.html

h2.

openssl

openssl req -new –nodes -keyout server.key -out server.csr -config /etc/ssl/req.conf

/etc/ssl/cacert.conf
[ req ]
default_bits = 1024
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
req_extensions = req_ext # The extentions to add to the self signed cert

[ req_distinguished_name ]
commonName = Common Name (eg, YOUR name)
commonName_max = 64

[ req_ext ]
subjectAltName = @alt_names

[alt_names]
DNS.1 = mail.exemple.com
DNS.2 = www.exemple.com