Zelan sortu CAcert-eko SSL zertifikatuak gure web zerbitzarietarako

Egun hauetan barne sareko zerbitzari batzuen ziurtagiriak eguneratzea tokatu zait. Horietarako CAcert-eko ziurtagiriak erabili ohi ditut azkenengo urteetan.

CACert-ek gutxieneko gako luzera 2048 bitekoa eskatzen duenez, nire ziurtagiri ohiak aldatu behar izan ditut, eta sortzeko hau egin behar izan dut:

# openssl req -nodes -newkey rsa:2048 -keyout privatekey.pem -out csr.pem

Generating a 2048 bit RSA private key
...++++++
........++++++
writing new private key to 'privatekey.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:XX
State or Province Name (full name) [Some-State]:XXXX
Locality Name (eg, city) []:XXXXXX
Organization Name (eg, company) [Internet Widgits Pty Ltd]:XXXXXX
Organizational Unit Name (eg, section) []:XXXXX
Common Name (eg, YOUR name) []: Zerbitzariaren izena
Email Address []:XXXXX@XXXXX.XX

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

Behin csr.pem sortuta CAcert webgunearen bitartez ziurtagiria sinatzeko eskatu, eta listo!