INTL 3:770/1 3:770/3   
   REPLYADDR ldo@nz.invalid   
   REPLYTO 3:770/3.0 UUCP   
   MSGID:  523f76d0   
   REPLY:  d98879b4   
   PID: SoupGate-Win32 v1.05   
   On Sat, 31 Aug 2024 00:54:42 -0000 (UTC), bp wrote:   
      
   > The command to generate the self-signed certificate and key pair was   
   > openssl req -new -x509 -days 365 -sha3-512 -keyout host.key -out host.crt   
   > based on instructions from   
   > https://docs.freebsd.org/en/books/handbook/security/ combined with some   
   > private correspondence suggesting it worked correctly.   
      
   I had a look at those instructions, and they don’t mention how to   
   generate the actual CA cert. Having your own CA cert means you only   
   have to import it once into a browser (or other SSL/TLS client), and   
   it will thereafter trust all certs signed by this CA.   
      
   The procedure for being your own CA is a lot simpler in OpenSSL 3. I   
   have some notes here .   
      
   --- SoupGate-Win32 v1.05   
    * Origin: Agency HUB, Dunedin - New Zealand | Fido<>Usenet Gateway (3:770/3)   
   SEEN-BY: 10/0 1 90/1 103/705 105/81 106/201 124/5016 129/305 153/757   
   SEEN-BY: 153/7715 218/0 1 601 700 840 870 930 220/70 221/1 6 360 226/17   
   SEEN-BY: 226/30 100 227/114 229/110 111 114 200 206 300 317 400 426   
   SEEN-BY: 229/428 470 550 616 664 700 240/1120 266/512 267/800 282/1038   
   SEEN-BY: 291/111 292/854 301/1 113 812 310/31 320/219 322/757 335/364   
   SEEN-BY: 341/66 342/200 396/45 460/58 633/280 712/848 770/1 3 100   
   SEEN-BY: 770/330 340 772/210 220 230 5020/400 1042 5058/104 5075/35   
   PATH: 770/3 1 218/840 221/6 301/1 218/700 229/426