Listing 1: Encryption key pair generation in the server
sadr% /usr/local/ns-home/bin/https/admin/bin/sec-key -------------------------------------------------------- | Netscape Communications Corporation | | Key Pair File Generation | -------------------------------------------------------- Welcome to the key pair file generator. With this program, you can generate the public and private keys that your server uses for secure communications. First, the server needs to know where to put the new key. You should NOT overwrite an existing key pair file! Place the new key in a separate location. Make a note of the new key's location! You will need it later when you request a certificate. Type a full pathname to the new keyfile's location: The key will be placed in: Next, a random seed must be generated that will be used in the creation of your key pair file. One of the easiest ways to create a random seed is to count the amount of time between keystrokes on a keyboard. To begin, type keys on the keyboard until this progress meter is full. DO NOT USE THE AUTOREPEAT FUNCTION ON YOUR KEYBOARD! |*******************************/ | Continue typing until the progress meter is full: Great! Press enter to continue. Generating key. This may take a few minutes... Done. Finally, enter a password which will be used to encrypt the key pair file. You will use this password when starting up and shutting down your server. NOTE: Be sure to keep this password safe! If you must write down the password, the physical safety of the recording is your responsibility. The password must be at least 8 characters long, and must contain at least one non-alphabetic character in it. It should not be a word in any dictionary. Password: Re-enter password: Congratulations! Your new key is in: /usr/local/ns-home/https- sadr/config/ServerKey.db -rw------- 1 root 32768 Mar 3 12:20 /usr/local/ns- home/https-sadr/config/ServerKey.db Now that you have generated a key, return to the sec-gkey form and in the box for 'Key File Path', enter: /usr/local/ns-home/https-sadr/config/ServerKey.db and then generate your certificate.
|