Home / user-191703

B T's questions

Martin Hope
B T
Asked: 2019-10-03 19:43:23 +0800 CST
  • 5

I created a self-signed certificate using the following command using OpenSSL 1.1.1b (26 Feb 2019):

openssl req -nodes -new --days 900 -subj /CN=192.168.0.104:8080 -x509 -keyout server.key -out server.crt

I then used windows mmc imported the resulting server.crt into Console Root -> Certificates - Current User -> Trusted Root Certification Authorities -> Certificates

When I go to the page in chrome tho at 192.168.0.104:8080, it tells me the page is "Not Secure" (tho if I look at the certificate info, the Certificate Status under Certification path says "This certificate is OK."

I did a similar process on my android phone, uploading it to my phone, adding the certificate in the Encryption & credentials settings section.

However, when I go to the page, it tells me the "server's certificate does not match the URL".

What am I doing wrong here?

Update:

I'm now using the req.conf

[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = no
[req_distinguished_name]
C = US
ST = CA
L = Belmont
O = N/A
OU = N/A
CN = 192.168.0.104
[v3_req]
subjectAltName = @alt_names
[alt_names]
DNS.0 = localhost
IP.0 = 192.168.0.104

And creating the certificate and key with:

openssl req -x509 -nodes -days 999 -newkey rsa:2048 -keyout server.key -out server.crt -config req.conf

Then I restarted chrome on windows (I can't believe restarting programs for settings to take effect is still necessary in 2019). Windows chrome then recognizes it fine.

However on android, I can't even install this certificate - it tells me "Private key required to install a certificate". This is even more confusing.

ssl-certificate
Martin Hope
B T
Asked: 2015-07-27 15:07:09 +0800 CST
  • 0

I'm trying to setup a simple email server using node smtp-server. I'm the only one that's ever accessed the machine (a CentOS 6.5 box on Digital Ocean), and I've only set up 2 http servers. I'm getting the error "EADDRINUSE" when I try to listen on port 25.

lsof | grep smtp gives me:

master      955    root   12u     IPv4               8103       0t0        TCP localhost:smtp (LISTEN)
master      955    root   13u     IPv6               8105       0t0        TCP localhost:smtp (LISTEN)
master      955    root   53u     unix 0xffff88003a91c380       0t0       8155 private/smtp

What might be using port 25, and how can I disable it?

linux