[TriLUG] new SSL certificates on our mail server

[Alan Porter]

> What about making the public part accessible on pilot, so people can
> bootstrap if they trust the ssh key.

It is in /etc/postfix/ssl/mail.trilug.org.crt, and it's readable by mere mortals.

Some useful commands:

FINGERPRINTS:
openssl x509 -md5 -in MYCERT.crt -noout -fingerprint
openssl x509 -sha1 -in MYCERT.crt -noout -fingerprint

LOTS OF OTHER CERTIFICATE INFO:
openssl x509 -in MYFILE.crt -noout -text


Alan