Re: [twsocket] SSL intermediate cert problem
Hello, You can import them using import certificate wizard in Internet Explorer, this wizard also have an EXE version located into %WINDIR% but I don't remember the name. regards. FT Hello, FT I wonder how would an end user install these files sent from Comodo: FT Root CA Certificate - AddTrustExternalCARoot.crt FT Intermediate CA Certificate - UTNAddTrustSGCCA.crt FT Intermediate CA Certificate - ComodoUTNSGCCA.crt FT Intermediate CA Certificate - EssentialSSLCA_2.crt FT Your Free SSL Certificate - services_mypriority_co_uk.crt FT It is my experience that crt's and pem's are exactly the same yet with FT different extensions. FT Please advise. FT Best Regards, FT SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] SSL intermediate cert problem
Hi, But this is a server certificate! Do you still insist on your advice after this info? Regards, Gorkem Ates On 5/13/09, Dod do...@sky.fr wrote: Hello, You can import them using import certificate wizard in Internet Explorer, this wizard also have an EXE version located into %WINDIR% but I don't remember the name. regards. FT Hello, FT I wonder how would an end user install these files sent from Comodo: FT Root CA Certificate - AddTrustExternalCARoot.crt FT Intermediate CA Certificate - UTNAddTrustSGCCA.crt FT Intermediate CA Certificate - ComodoUTNSGCCA.crt FT Intermediate CA Certificate - EssentialSSLCA_2.crt FT Your Free SSL Certificate - services_mypriority_co_uk.crt FT It is my experience that crt's and pem's are exactly the same yet with FT different extensions. FT Please advise. FT Best Regards, FT SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be -- Gorkem Ates Fastream Technologies Software IQ: Innovation Quality www.fastream.com | Email: supp...@fastream.com | Tel: +90-312-223-2830 | MSN: g_a...@hotmail.com Join IQWF Server Yahoo group at http://groups.yahoo.com/group/IQWFServer Join IQ Reverse Proxy Yahoo group at http://groups.yahoo.com/group/IQReverseProxy -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] SSL intermediate cert problem
Hi, Of course I am trying to use ICS THttpServer! Regards, SZ On 5/13/09, Dod do...@sky.fr wrote: Hello, So if for server, it depend which server software you intend to use. Look at this page that show you how to do it with well known servers like IIS, Apache, WebSphere... http://www.instantssl.com/ssl-certificate-support/cert_installation/ssl-certificate-index.html regards. FT Hi, FT But this is a server certificate! Do you still insist on your advice FT after this info? FT Regards, FT Gorkem Ates FT On 5/13/09, Dod do...@sky.fr wrote: Hello, You can import them using import certificate wizard in Internet Explorer, this wizard also have an EXE version located into %WINDIR% but I don't remember the name. regards. FT Hello, FT I wonder how would an end user install these files sent from Comodo: FT Root CA Certificate - AddTrustExternalCARoot.crt FT Intermediate CA Certificate - UTNAddTrustSGCCA.crt FT Intermediate CA Certificate - ComodoUTNSGCCA.crt FT Intermediate CA Certificate - EssentialSSLCA_2.crt FT Your Free SSL Certificate - services_mypriority_co_uk.crt FT It is my experience that crt's and pem's are exactly the same yet with FT different extensions. FT Please advise. FT Best Regards, FT SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] SSL intermediate cert problem
Hello, You speak about end-user, but do you already installed one yourself ? regards. FT Of course I am trying to use ICS THttpServer! FT Regards, FT SZ FT On 5/13/09, Dod do...@sky.fr wrote: Hello, So if for server, it depend which server software you intend to use. Look at this page that show you how to do it with well known servers like IIS, Apache, WebSphere... http://www.instantssl.com/ssl-certificate-support/cert_installation/ssl-certificate-index.html regards. FT Hi, FT But this is a server certificate! Do you still insist on your advice FT after this info? FT Regards, FT Gorkem Ates FT On 5/13/09, Dod do...@sky.fr wrote: Hello, You can import them using import certificate wizard in Internet Explorer, this wizard also have an EXE version located into %WINDIR% but I don't remember the name. regards. FT Hello, FT I wonder how would an end user install these files sent from Comodo: FT Root CA Certificate - AddTrustExternalCARoot.crt FT Intermediate CA Certificate - UTNAddTrustSGCCA.crt FT Intermediate CA Certificate - ComodoUTNSGCCA.crt FT Intermediate CA Certificate - EssentialSSLCA_2.crt FT Your Free SSL Certificate - services_mypriority_co_uk.crt FT It is my experience that crt's and pem's are exactly the same yet with FT different extensions. FT Please advise. FT Best Regards, FT SZ -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
Re: [twsocket] SSL intermediate cert problem
Fastream Technologies wrote: Hello, I wonder how would an end user install these files sent from Comodo: Root CA Certificate - AddTrustExternalCARoot.crt Intermediate CA Certificate - UTNAddTrustSGCCA.crt Intermediate CA Certificate - ComodoUTNSGCCA.crt Intermediate CA Certificate - EssentialSSLCA_2.crt Your Free SSL Certificate - services_mypriority_co_uk.crt It is my experience that crt's and pem's are exactly the same yet with different extensions. If they are not PEM files they have to be converted to PEM with openssl.exe first. Then, in order to ensure that those clients who only have the root CA in their trusted store will ever be able to verify this _ugly long chain, copy all intermediate as well as the server certificate into one PEM file and make it the server certificate (use a text editor for this purpose which is able to handle LF only line breaks as well). As you can imagine, the SSL handshake will be rather slow if four certificates have to be sent to the client. I do not know whether these certificates are commonly included in Firefox by default, or whether IE automaticaly retrieves them from the Microsoft certificate server. If one can be sure that connecting clients do have the complete chain (well, without the last one of course) it was enough to just use the server certificate. -- Arno Garrels -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
