On Wed, Dec 16, 2009 at 11:49, Dagobert Michelsen <[email protected]> wrote:
> Hi Rupert, > > Am 16.12.2009 um 08:45 schrieb rupert THURNER: > >> On Tue, Dec 15, 2009 at 18:24, Ben Walton <[email protected]> wrote: >> Excerpts from rupert THURNER's message of Tue Dec 15 11:51:50 -0500 2009: >> > from work? no, nothing but http/s. but i will ask them if i get an >> exception >> > for ssh to opencsw. >> >> the firewall policies allow certain things, and forbid others, besides the >> technical restrictions in place. either there is a technically clean >> possibility in line with the rules (like Sun SGD), or i have to go through >> the paper process for getting a permission for "ssh login.opencsw". >> >> but i do not want to break their rules even if technically possible (e.g. >> pierce the firewall by tunneling ssh through 443). if i do not like the >> rules any more it is time to look for another job i guess :) >> > > Fortunately setting up SGD is quite easy. If you want you can try > logging in with accessing > https://login.opencsw.org > (http is redirected). As it is not an official certificate you must > accept the root cert and add it to your keystore once. > > uuh .. that reminds me that we have another restriction in place: there is a list of trusted ca's. we use a software called "webwasher" which breaks up https connections at the firewall - and blocks everything which is not on this list. but, we convinced the security people to accept http://cacert.org/ certs to have a free alternative as well - besides the usual suspects thawte, etc. rupert.
_______________________________________________ maintainers mailing list [email protected] https://lists.opencsw.org/mailman/listinfo/maintainers
