Securing OpenSSL

Securing and Optimizing Linux: RedHat Edition -A Hands on Guide
Prev | Chapter 24. Software -Networking/Encryption | Next

# 24.7. Securing OpenSSL

Make your keys `Read and Write` only by the super-user `root`. This is important because no one needs to touch these files. use the following commands:

    [root@deep] /# chmod 600  /etc/ssl/certs/ca.crt
    [root@deep] /# chmod 600  /etc/ssl/certs/server.crt
    [root@deep] /# chmod 600  /etc/ssl/private/ca.key
    [root@deep] /# chmod 600  /etc/ssl/private/server.key

Some possible uses of OpenSSL software, for example OpenSSL can be used to:

1. Create your own Certificate Server.

2. Provide data confidentiality, integrity, authentication, and electronic signature in transmission for the users.

3. Secure electronic commerce transactions.

Prev | Home | Next
Commands -often used | Up | Installed files