certs: Add a default OpenSSL configuration file, and a Makefile.

diff --git a/certs/Makefile b/certs/Makefile
index c5e4294c7d7130e22e7f485a87944c3a5331c129..17b9dfa9c16d805296cebe171da9644228653bbd 100644 (file)
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -11,8 +11,6 @@ keysize=2048
 # signing request that you can submit to a CA, or `make yourhost.cert`
 # to generate a self signed certificate.
 
-.PRECIOUS: %.cnf %.key
-
 # To request a cert
 %.csr: %.cnf %.key
        openssl req -new -key $(lastword $^) -out $@ -utf8 -config $(firstword $^)
@@ -27,4 +25,4 @@ keysize=2048
 
 %.key:
        openssl genrsa $(keysize) > $@
-       @chmod 400 $@
+       @chmod 400 -c $@

diff --git a/certs/openssl.cnf b/certs/openssl.cnf
index 44fc042415d2154c3c6b66263c96f68782a4f586..9e72abe4b688bd5e63c41d2e4f8671c3220628d4 100644 (file)
--- a/certs/openssl.cnf
+++ b/certs/openssl.cnf
@@ -22,7 +22,7 @@ prompt = no
 [ distinguished_name ]
 
 commonName             = example.com
-countryName            = GB
+countryName            = UK
 localityName           = The Internet
 organizationName       = Your Organisation
 organizationalUnitName = XMPP Department