Hitchhiker's Guide to Openbsd

10.6 - Why does Sendmail ignore the 
/etc/hosts
 file?
By default, Sendmail uses DNS for name resolution, not the 
/etc/hosts
file. The behavior can be 
changed through the use of the 
/etc/mail/service.switch
file. 
If you wish to query the hosts file before DNS servers, create a 
/etc/mail/service.switch
file 
which contains the following line: 
hosts files dns
http://www.openbsd.org/faq/faq10.html (6 of 32)9/4/2011 10:02:15 AM

---

10 - System Management
If you wish to query ONLY the hosts file, use the following: 
hosts files
Send Sendmail a HUP signal: 
# kill -HUP `head -1 /var/run/sendmail.pid`
and the changes will take effect. 
10.7 - Setting up a Secure HTTP server with SSL(8)
OpenBSD ships with an SSL-ready httpd and RSA libraries. For use with 
httpd(8)
, you must first have a 
certificate created. This will be kept in /etc/ssl/ with the corresponding key in /etc/ssl/private/. The steps 
shown here are taken in part from the 
ssl(8)
 man page. Refer to it for further information. This FAQ entry 
only outlines how to create an RSA certificate for web servers, not a DSA server certificate. To find out 
how to do so, please refer to the 
ssl(8)
man page. 
To start off, you need to create your server key and certificate using OpenSSL: 
# openssl genrsa -out /etc/ssl/private/server.key 1024
Or, if you wish the key to be encrypted with a passphrase that you will have to type in when starting 
servers 
# openssl genrsa -des3 -out /etc/ssl/private/server.key 1024
The next step is to generate a Certificate Signing Request which is used to get a Certifying Authority (CA) 
to sign your certificate. To do this use the command: 
# openssl req -new -key /etc/ssl/private/server.key -out /etc/