Re: [CentOS] self signing certificates

2009-08-25 Thread Kai Schaetzl
Jerry Geis wrote on Mon, 24 Aug 2009 21:23:31 -0400: Was just trying to find a way so that users that dont know what this box is that is poping up wont even see the box. Sounds like there is no way around it - to just use https encryption. As has been said in this thread and in other

Re: [CentOS] self signing certificates

2009-08-25 Thread Bowie Bailey
Kai Schaetzl wrote: Jerry Geis wrote on Mon, 24 Aug 2009 21:23:31 -0400: Was just trying to find a way so that users that dont know what this box is that is poping up wont even see the box. Sounds like there is no way around it - to just use https encryption. As has been said

Re: [CentOS] self signing certificates

2009-08-25 Thread Paul Heinlein
On Mon, 24 Aug 2009, aurfal...@gmail.com wrote: I would go buy a cert. They aren't much money and you can specify the granularity you want the cert to have, the more granularity, the higher the cost but they are not that much anyways. The difficulty with purchased certificates is timely

Re: [CentOS] self signing certificates

2009-08-24 Thread Brian Becker
On Mon, Aug 24, 2009 at 9:32 AM, Jerry Geisge...@pagestation.com wrote: For internal applications what do people/places do? It would be nice to be seamless and have the your not trusted window pop-up. Yet this is not a public web site either. Just internal use. The server might be on the

Re: [CentOS] self signing certificates

2009-08-24 Thread Jason Pyeron
-Original Message- From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On Behalf Of Brian Becker Sent: Monday, August 24, 2009 9:44 To: CentOS mailing list Subject: Re: [CentOS] self signing certificates On Mon, Aug 24, 2009 at 9:32 AM, Jerry Geisge

Re: [CentOS] self signing certificates

2009-08-24 Thread Jerry Geis
If you are in a windows domain you can distribute the public certificate of your signing authority using active directory. This will prevent IE from showing the untrusted warning. Otherwise you can install the public certificate into the users web browser and any certs you sign will show

Re: [CentOS] self signing certificates

2009-08-24 Thread Robert Heller
At Mon, 24 Aug 2009 09:32:00 -0400 CentOS mailing list centos@centos.org wrote: hi all, I have gone through the process of self signing certificates. Aside from the pop-ups about not trusted etc... everything appears to work. For internal applications what do people/places do? It

Re: [CentOS] self signing certificates

2009-08-24 Thread Kai Schaetzl
one time you talk about applications, one time about web site. It's also not clear what you actually want to achieve. So, what is the exact question/problem? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: [CentOS] self signing certificates

2009-08-24 Thread Ian Murray
- Original Message From: Jerry Geis ge...@pagestation.com To: CentOS ML centos@centos.org Sent: Monday, 24 August, 2009 14:32:00 Subject: [CentOS] self signing certificates hi all, I have gone through the process of self signing certificates. Aside from the pop-ups about

[CentOS] self signing certificates

2009-08-24 Thread James B. Byrne
From: Jerry Geis ge...@pagestation.com To: CentOS ML centos@centos.org Sent: Monday, 24 August, 2009 14:32:00 Subject: [CentOS] self signing certificates hi all, I have gone through the process of self signing certificates. Aside from the pop-ups about not trusted etc... everything

Re: [CentOS] self signing certificates

2009-08-24 Thread aurfalien
Subject: [CentOS] self signing certificates hi all, I have gone through the process of self signing certificates. Aside from the pop-ups about not trusted etc... everything appears to work. For internal applications what do people/places do? It would be nice to be seamless and have the your

Re: [CentOS] self signing certificates

2009-08-24 Thread Jerry Geis
If you are simply using certs for encryption and not for authentication then this practice probably can be safely dispensed with. If you ARE using certs for authentication then this provision is absolutely required. James, Correct I am really just using cert or https for encryption not

Re: [CentOS] self signing certificates

2009-08-24 Thread Les Bell
Jerry Geis ge...@pagestation.com wrote: Was just trying to find a way so that users that dont know what this box is that is poping up wont even see the box. Can't you install your own root certificate into the internal client browsers? The book Network Security Hacks (Andrew Lockhart,

Re: [CentOS] self signing certificates

2009-08-24 Thread Keith Keller
On Tue, Aug 25, 2009 at 11:38:08AM +1000, Les Bell wrote: Can't you install your own root certificate into the internal client browsers? The book Network Security Hacks (Andrew Lockhart, O'Reilly) gives a procedure for doing this (p. 112). You generate a .der file from the cacert.pem file,

Re: [CentOS] self signing certificates

2009-08-24 Thread Les Bell
Keith Keller kkel...@speakeasy.net wrote: If you're going to go through that much trouble Although I didn't quote the entire process here (copyright, time, etc.) it's only one command, the adding of one line to the Apache httpd.conf, (probably) scp'ing the files onto the server and providing