Repairing a journaled volume, Setting up ssl for mail service, Generating a csr and creating a keychain – Apple Mac OS X Server (version 10.2.3 or later) User Manual
Page 614: Setting up ssl for mail service 614

614
Chapter 17
To disable journaling for a volume called MyDisk, type “sudo /usr/sbin/diskutil disableJournal
/Volumes/MyDisk”.
Repairing a Journaled Volume
You can check and repair a journaled volume using fsck_hfs from the command line.
To repair a journaled disk:
1
Log in to the server with the journaling disk as an administrator.
2
Make sure the server is in a quiescent state.
3
Open the Terminal application.
4
Type the fsck_hfs command using the -f option.
For example, to force checking a journaled volume on device /dev/disk0s11, type “fsck_hfs -f
/dev/disk0s11”.
Setting Up SSL for Mail Service
Mail service requires some configuration to provide Secure Sockets Layer (SSL) connections
automatically. The basic steps are as follows:
m Generate a Certificate Signing Request (CSR) and create a keychain.
m Obtain an SSL certificate from an issuing authority.
m Import the SSL certificate into the keychain.
m Create a passphrase file.
Generating a CSR and Creating a Keychain
To begin configuring mail service for SSL connections, you generate a CSR and create a
keychain by using the command-line tool certtool. A CSR is a file that provides information
needed to issue an SSL certificate.
1
Log in to the server as root.
2
In the Terminal application, type the following two commands, pressing Return after each
one:
cd /private/var/root/Library/Keychains/
/usr/bin/certtool r csr.txt k=certkc c
This use of the certtool command begins an interactive process that generates a Certificate
Signing Request (CSR) in the file csr.txt and creates a keychain named certkc.
LL0395.Book Page 614 Wednesday, November 20, 2002 11:44 AM