10 posts tagged cacert
Subscribe-
http://www.evil.ie/ bleh/ ?p=122
Firefox 3 and its insistence on making you jump through hoops to view sites using a self-signed ssl cert or certs signed by a root cert you don’t have installed (i.e. CAcert) is making me angry. In fact, if ff3 is just going to deny access to a page secured with a CAcert certificate by default, what’s
-
Status of TLS/SNI in 04/2008
http://www.alexanderkiel.net/ 2008/ 04/ 22/ status-of-tls-sni/Since I share a VPS with Georg I’m interested in SNI to be able to drive various HTTPS sites on the same machine with only one IP. If you use only HTTP, the Apache virtual host feature will do the magic already for many years. But with HTTPS you are out of luck until now.
-
SSL and CAcert.org
http://asbjorn.fellinghaug.com/ wp/ 2008/ 04/ ssl-and-cacertorg/SSL and CAcert.org April 19th, 2008 Today I spent some time trying to understand SSL certificates and how I could implement SSL on my web sites. Some googling later gave me some interessting tips regarding using CAcert and Apache2. So, signing up as a user at CAcert, I was able to get my certificates signed by CAcert by simple web clicks.
-
SSL and CAcert.org
http://asbjorn.fellinghaug.com/ blog/ 2008/ 04/ ssl-and-cacertorg/Today I spent some time trying to understand SSL certificates and how I could implement SSL on my web sites. Some googling later gave me some interessting tips regarding using CAcert and Apache2. So, signing up as a user at CAcert, I was able to get my certificates signed by CAcert by simple web clicks.
-
Manually decrypting S/MIME mails
http://www.hboeck.de/ archives/ 592-Manually-decrypting-SMIME-mails.htmlI recently took the new CAcert assurer test. Afterwards, one has to send a S/MIME-signed mail to get a PDF-certificate. Having the same problem like Bernd, the answer came in an RC2-encrypted S/MIME-mail. I'm using kmail, kmail uses gpgsm for S/MIME and that doesn't support RC2.
-
The Easy Way To Generate OpenSSL CSRs with subjectAltNames
http://adam.shand.net/ iki/ 2007/ The_Easy_Way_To_Generate_OpenSSL_CSRs_with_sub…Run your own Linux server and want to use SSL to keep some services encrypted? Tired of having to generate a certificate for every hostname which you want to run an encrypted service on (imap, smtp, www etc)? Well you can use subjectAltNames to include valid multiple hostnames in a single certificate, the catch has been that the syntax for doing this with OpenSSL has been "a little obscure".
-
The Easy Way To Generate OpenSSL CSRs with subjectAltNames
http://adam.shand.net/ iki/ 2007/ The_Easy_Way_To_Generate_OpenSSL_CSRs_with_sub…Run your own Linux server and want to use SSL to keep some services encrypted? Tired of having to generate a certificate for every hostname which you want to run an encrypted service on (imap, smtp, www etc)? Well you can use subjectAltNames to include valid multiple hostnames in a single certificate, the catch has been that the syntax for doing this with OpenSSL has been "a little obscure".
-
The Easy Way To Generate OpenSSL CSRs with subjectAltNames
http://adam.shand.net/ iki/ 2007/ The_Easy_Way_To_Generate_OpenSSL_CSRs_with_sub…Run your own Linux server and want to use SSL to keep some services encrypted? Tired of having to generate a certificate for every hostname which you want to run an encrypted service on (imap, smtp, www etc)? Well you can use subjectAltNames to include valid multiple hostnames in a single certificate, the catch has been that the syntax for doing this with OpenSSL has been "a little obscure".
-
Working to end the digital certificate racket
http://hightechsorcery.com/ 2007/ 12/ working-end-digital-certificate-racketWorking to end the digital certificate racket December 21st, 2007specialj in cacert digital certificates encryption security ssl tls I was happy to read the article Digital Certificates: Do They Work? which mentioned the excellent paper by Carl Ellison and Bruce Schneier titled Ten Risks of PKI: What You’re not Being Told about Public Key Infrastructure.
-
CaCert.org
http://blog.w-nz.com/ archives/ 2007/ 12/ 08/ cacertorg/CaCert.org December 8th, 2007 CaCert is a Certification Authority that works with a web of trust: people meet and assure (similar to keysigning) eachother. If you’ve been assured by enough people you’ll be able to let your ssl server key be certified by cacert.