[lug] ssl ca certs

[Evelyn Mitchell]

Take a look at:
http://www.ultranet.com/~fhirsch/Papers/cook/ssl_cook.html
It's got all the details you need.

efm

On Fri, Aug 31, 2001 at 06:32:14PM -0400, Hugh Brown wrote:
> These are certs for an individual not for a Certificate authority.  I want
> to be able to sign five different certs and have it recognize me as a
> trusted certificate authority.  
> 
> For example, if you want to test out a Verisign certificate they will sign
> one for you using a Test Certificate Authority which you have to load into
> every browser.  They have a link that you click on that fires up a process
> in netscape that allows you to add a cert to the trusted signers list (i.e.
> Communicator->Tools->Security Info->Certificates->Signers).  I was
> wondering how to get stuff on to that list.
> 
> I guess in your below message that meant everyone who uses netscape.  At
> first read, I thought it meant the global populace that uses netscape, not
> merely all the users of a local netscape installation.
> 
> Hugh
> 
> "Evelyn Mitchell"
> > 
> > Netscape Communicator 4.78
> > Communcator:
> >   Tools:
> >     Security Info:
> >       Certificates:
> >         Yours:      # To import your certificate
> >            Import a Certificate (requires you to set up a private password 
> >               for communicator)
> >         People:     # To import someone elses
> >            It looks like if you use Communicator to read your email,
> >            you can manage certificates emailed to you from here.
> >            I use mutt, so the only options it gives me are to search
> >            in the Netscape or the Verisign directory for a certificate
> >            matching an email. I don't know how difficult it is to get
> >            listed in either of those. I also don't know how to get more
> >            directories added to that list.
> > 
> > Konqueror is much easier:
> >   Tools:
> >     Crypto:
> >       Your Certificates:
> >         Import
> >       Peer SSL Certificates:
> >         Import
> > 
> > Does that help?
> > Evelyn Mitchell
> > efm at tummy.com
> > 
> > On Fri, Aug 31, 2001 at 05:04:20PM -0400, Hugh Brown wrote:
> > > Just me and my friends.
> > > 
> > > Hugh
> > > 
> > > "Evelyn Mitchell"
> > > > 
> > > > On Fri, Aug 31, 2001 at 04:18:47PM -0400, Hugh Brown wrote:
> > > > > I am playing around with ssl again.  I am experimenting with being my own
> > > > > CA and was wondering how I can get my CA cert into Netscape's list of
> > > > > trusted signers.  Any ideas?
> > > > 
> > > > Do you mean for everyone who uses Netscape, or just for you and your friends?
> > > > 
> > > > Evelyn Mitchell
> > > > efm at tummy.com
> > > > 
> > > _______________________________________________
> > > Web Page:  http://lug.boulder.co.us
> > > Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> > _______________________________________________
> > Web Page:  http://lug.boulder.co.us
> > Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> > 
> 
> ------------------------------------
> System Administrator/Unix Consultant
> hugh at vecna.com
> Vecna Technologies, Inc
> 6525 Belcrest Rd, Suite 612
> Hyattsville MD, 20782
> 301.864.7253
> http://www.vecna.com
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug