Secure XMLRPC Server / PEM Files

Laszlo Nagy gandalf at designaproduct.biz
Tue Sep 12 10:05:12 EDT 2006


Daniel Crespo írta:
> Hi Laszlo,
>
> I have read that. It's the wrapper for the usage of OpenSSL, so I have
> to install it. I have downloaded the Borland C++ compiler, and I'm
> doing so right now, but I'm not getting good results yet.
>   
You do not need any compiler. You just need to install the openssl 
binaries and the wrapper.
> I tried to import OpenSSL, it seems to work.
>   
Great.
> Now, I want to try the code I submited earlier, but I need the .pem
> files. You told me to change generate.sh to generate.bat. How can I do
> that?
>   

Basically, use "del" instead of "rm" and use "move" instead of "mv". Use 
<yourdomain.com> instead of $1. Moreover, openssl.exe must be on your 
path. That's all.

Try this (untested):

openssl req -config openssl.cnf -new -out my-server.csr
openssl rsa -in privkey.pem -out my-server.key
openssl x509 -in my-server.csr -out my-server.cert -req -signkey my-server.key -days 1500
openssl x509 -in my-server.cert -out my-server.der.crt -outform DER

move my-server.csr yourdomain.com.csr
move my-server.cert yourdomain.com.cert.pem
move my-server.key yourdomain.com.key.pem
move my-server.der.crt yourdomain.com.der.crt

del privkey.pem


  Laszlo




More information about the Python-list mailing list