Lines 47-48 of /var/qmail/bin/mkservercert: /usr/bin/openssl req -new -x509 -days ${days} -nodes \ -config ${conffile} -out $pemfile -keyout $pemfile -rand ${randfile} || cleanup Line 9 of /var/qmail/control/servercert.cnf: encrypt_key = yes OpenSSL documentation of encrypt_key: "If this is set to no then if a private key is generated it is not encrypted. This is equivalent to the -nodes command line option." My intent of this bug report is to inquire why encrypt_key = yes is in servercert.cnf, yet why mkservercert uses the -nodes switch to contradict the option. Reproducible: Always Steps to Reproduce: 1. Run /var/qmail/control/servercert.cnf Actual Results: Key is not encrypted. Expected Results: Key is not encrypted.
Apologies, step to reproduce should have been "Run /var/qmail/bin/mkservercert"
InCVS.
