[Help-gnutls] Re: Beginner's question

[Simon Josefsson]

"Rainer Gerhards" <rgerhards at gmail.com> writes:

> I will generate a new one and record what I am doing. In the mean
> time, I've also found the sample .pem's inside the tarball (which I
> now downloaded). But, of course, I need to know how to generate the
> required files.
>
> Thanks again for your help, will post shortly...

No problem.  For example credentials, see also:

http://www.gnu.org/software/gnutls/server.html
http://www.gnu.org/software/gnutls/test-credentials/

Btw, if you are going to make rsylog use gnutls you might want to
download the gnutls tar ball and build it.

/Simon

> Rainer
>
> On Fri, Apr 11, 2008 at 2:36 PM, Simon Josefsson <simon at josefsson.org> wrote:
>>
>> "Rainer Gerhards" <rgerhards at gmail.com> writes:
>>
>>  > Hi there,
>>  >
>>  > I have just begun looking at GNUTls. I intend to implement TLS for my
>>  > rsyslog project - http://www.rsyslog.com (a GPLed replacement
>>  > syslogd).  I am currently developing on Fedora 8 with GNUTls 1.6.3. I
>>  > obtained and compiled the sample programs. However, I do not have any
>>  > pem files and intended to create them via the steps outlined in
>>  >
>>  > http://www.gnu.org/software/gnutls/manual/gnutls/gnutls.html#SECTION00930000000000000000
>>  >
>>  > For my last try, I did exactly follow the steps on that page, from top
>>  > to bottom. When I now run certtool --certificate-info, I get good info
>>  > on ca-cert.pem, but for cert.pem I always just get "Decoding error:
>>  > Base64 decoding error." (and of course the same happens inside my
>>  > simple server).
>>  >
>>  > Any advise on what I am doing wrong would be deeply appreciated.
>>
>>  Could you attache the cert.pem file?
>>
>>  /Simon
>>