On Fri, Mar 03, 2000 at 09:31:58AM +0000, [EMAIL PROTECTED] wrote:
> Alex,,
> The trouble with using self signed certs is that you need to install the CA
> cert in the browser to stop messages popping up when you connect to the site -
> obviously no real problem as you will either be using them for testing or in a
> closed environment (or limited number of clients). Using the 'Free Test
> Certificates' from thawte is a little better as the CA cert that they use to
> sign the CSR is already installed in Netscape (only 4.7x?).
>
> Karl,
> To avoid this problem 'buy a cert' or install the CA cert into each browser
> (have a look at pkg.contrib/loadcacert.cgi)
>
> Mikey
That would be nice EXCEPT that Thawte and most of the others won't SELL a
cert to an indivdual except under "extraordinary circumstances".
--
--
Karl Denninger ([EMAIL PROTECTED]) Web: http://childrens-justice.org
Isn't it time we started putting KIDS first? See the above URL for
a plan to do exactly that!
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]