All you need to do is following,
./openssl req -new -nodes -keyout certname.key -out certname.csr

This will generate two files one with .csr and the other .key extension.
Send the CSR to the provider (Thwarte, Entrust) and get your certificate
content back from them. Create a new file on your pound server
certname.cert.pem (you can name anything you like with just .pem extension).
In this file,  first copy the content of .key file and right after that copy
the certificate content you recevied from the provider in this file. That
should do it.

Thanks,

Dear Farhan,

Thank you ! is working fine.
Another one thing. I have my exchange 2007 server. Does the same key (I have it
also in .cer format) work on my exchange or I need to generate another key for
it?

Kind Regards

Victor

-----Original Message-----
From: Farhan Ahmed [mailto:farhan.mobin(at)gmail.com]
Sent: Thursday, December 04, 2008 10:36 PM
To: pound(at)apsis.ch
Subject: Re: [Pound Mailing List] Certificates installation

All you need to do is following,
./openssl req -new -nodes -keyout certname.key -out certname.csr

This will generate two files one with .csr and the other .key extension.
Send the CSR to the provider (Thwarte, Entrust) and get your certificate
content back from them. Create a new file on your pound server
certname.cert.pem (you can name anything you like with just .pem extension).
In this file,  first copy the content of .key file and right after that copy
the certificate content you recevied from the provider in this file. That
should do it.

Thanks,


--
To unsubscribe send an email with subject unsubscribe to pound(at)apsis.ch.
Please contact roseg(at)apsis.ch for questions.



__________ Information from ESET NOD32 Antivirus, version of virus signature
database 3664 (20081204) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



__________ Information from ESET NOD32 Antivirus, version of virus signature
database 3676 (20081209) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com

As far as I know you have to generate a separate CSR and key for every
server.

On Tue, Dec 9, 2008 at 8:42 AM, Victor E. Ftanou <vftanou(at)ppf.com.cy>
wrote:
[...]

Victor E. Ftanou wrote:[...]

It's worth noting the UC/SAN certificates provided by DigiCert
(probably others too, but DigiCert seems very reasonable, both
regarding price and technical abilities). They allow a single cert to
cover multiple hostnames, excellent for Exchange 2007, etc. More info:

   <URL:http://www.digicert.com/unified-communications-ssl-tls.htm>

s