1,234
edits
Changes
→COMPLETING THE LAB
== INVESTIGATION 1: GENERATING A SELF-SIGNED CERTIFICATE ==
Normally (in production), you would need to pay a "certificate authority" to issue a '''certificate''' for you. That is essentially '''a "signed" public key''' that will tell strangers on the internet that your server is really yours (i.e. the certificate authority says so). There is an obvious problem with the previous statement but that is mainly how public key encryption works on the Internet today.
'''Perform the following steps:'''
#Let's start with the "sending" SMTP server we have '''on VM2'''. Run the following, replacing <u>andrewsmith.ops</u> with '''<u>your</u> domain name''':
<source>mkdir -p /root/postfix-keys /etc/ssl/{private,certs}
</source>
#restart Restart apache and modify your firewall to allow traffic to '''port 443'''.
#Open a web-browser on your host and try to connect to https://vm1.<yourdomain>.ops/webmail
::You should get a security exception similar to the one's you saw with the email, and for the same reason (the site you are trying to contact has a self-signed certificate). Add the exception and login to access your email.
==COMPLETING THE LAB==
Follow the instructions for lab 8 on blackboard.
<!--
===In Class Submission (Murray Saul's Classes only)===
'''Arrange evidence (command output) for each of these items on your screen, then ask your instructor to review them and sign off on the lab's completion:'''
::*For '''Murray's classes''', run command (piping to the '''more''' command) and show output to instructor.
::<span style="color:green;font-size:1.5em;">✓</span>Completed Lab8 log-book notes.
-->
==EXPLORATION QUESTIONS==
