Tag Archive for 'SSL'

OpenSSL: Convert & Merge Key with Certificate

This second sticky note describes how to (1) convert a P12 file to PEM, and how to (2) merge a PEM and a CRT file to P12.

# covert
openssl pkcs12 -nocerts -in key_in.p12 -out key.pem
 
# merge
openssl pkcs12 -export -inkey key.pem -in pki.crt -out key_out.p12

These commands have been taken from here.

OpenSSL: Create a self-signed Certificate

This post is just a sticky note, because for testing purposes I have to create a self-signed certificate from time to time.

openssl genrsa -des3 -out server.key 1024
openssl req -new -key server.key -out server.csr
cp server.key server.key.org
openssl rsa -in server.key.org -out server.key
openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt

These commands have been taken from here.

WordPress Revisions & SSL

Yeah! Yesterday I finally updated my blog to WordPress version 2.8. And it was harder as expected: The update of the system finished successfully, but unfortunately the theme (K2) and most of the plugins stopped working :(

Fixing the theme issue was easy. If you also use the famous K2 theme, just download the latest nightly release. Yep, I don’t really trust nightly builds (even if it’s a release candidate), but it worked surprisingly well. Give it a try! Then, while I tried to update the corresponding plugins, I found out that it’s possible to omit the following plugins just by modifying the configuration:

Revision Control: I don’t wanna use revisions of posts and pages, because I’m already happy with the nice auto-save feature. Recently, I applied the Revision Control plugin, but there’s an easier way to disable revisions. Just add the following line to your wp-config.php file (before the wp-settings.php include).

define('WP_POST_REVISIONS', false);

Admin SSL: I wanna secure the entire admin area of my blog, e.g. passwords must not be sent in plain text! A short time ago, I applied the Admin SSL plugin, but again there’s an easier way to enable SSL. Just add the following two lines to your wp-config.php file (before the wp-settings.php include).

define('FORCE_SSL_LOGIN', true);
define('FORCE_SSL_ADMIN', true);

I must admit that I was afraid to do the WordPress update (“Never stop a running system.”). But now it’s good to see how one can simply reduce WordPress’ plugin dependencies.