Re: Limiting access to website ???

2003-10-07 Thread Mark Roach
On Sat, 2003-10-04 at 18:34, Michael D Schleif wrote: [...] While on this subject, what do you recommend for us to become a CA? `apt-cache search certificate' shows only pyca -- is that adequate? What are the considerations for becoming a CA? I just use openssl for our ca, I have written a few

Re: Limiting access to website ???

2003-10-04 Thread Aaron
Michael D Schleif [EMAIL PROTECTED] said, We are working on a web-based application. It will use mod_ssl to secure transactions. We want to limit access to the application. Yes, we have username/password authentication; but, we are also considering host-based limits. Can this be done

Re: Limiting access to website ???

2003-10-04 Thread Dave Carrigan
On Sat, Oct 04, 2003 at 12:50:39PM -0500, Michael D Schleif wrote: We are working on a web-based application. It will use mod_ssl to secure transactions. We want to limit access to the application. Yes, we have username/password authentication; but, we are also considering host-based

Re: Limiting access to website ???

2003-10-04 Thread Michael D Schleif
Aaron [EMAIL PROTECTED] [2003:10:04:15:02:38-0400] scribed: Michael D Schleif [EMAIL PROTECTED] said, We are working on a web-based application. It will use mod_ssl to secure transactions. We want to limit access to the application. Yes, we have username/password authentication; but,

Re: Limiting access to website ???

2003-10-04 Thread Michael D Schleif
Dave Carrigan [EMAIL PROTECTED] [2003:10:04:12:31:02-0700] scribed: On Sat, Oct 04, 2003 at 12:50:39PM -0500, Michael D Schleif wrote: We are working on a web-based application. It will use mod_ssl to secure transactions. We want to limit access to the application. Yes, we have

Re: Limiting access to website ???

2003-10-04 Thread Frank Gevaerts
On Sat, Oct 04, 2003 at 02:56:14PM -0500, Michael D Schleif wrote: As I responded to Aaron's message, we are looking for some kind of passive authentication, like an SSL Certificate. We do not want to have to rely on humans remembering another username/password, especially since the web

Re: Limiting access to website ???

2003-10-04 Thread Michael D Schleif
Frank Gevaerts [EMAIL PROTECTED] [2003:10:04:22:25:54+0200] scribed: On Sat, Oct 04, 2003 at 02:56:14PM -0500, Michael D Schleif wrote: As I responded to Aaron's message, we are looking for some kind of passive authentication, like an SSL Certificate. We do not want to have to rely on

Re: Limiting access to website ???

2003-10-04 Thread Dave Carrigan
On Sat, Oct 04, 2003 at 04:25:57PM -0500, Michael D Schleif wrote: OK, this section is what I need -- thank you: http://www.modssl.org/docs/2.8/ssl_howto.html#ToC6 Correct me if I am wrong; but, this is the process? [1] One (1) Certificate per client/browser authenticates *both* the

Re: Limiting access to website ???

2003-10-04 Thread Michael D Schleif
Dave Carrigan [EMAIL PROTECTED] [2003:10:04:15:15:21-0700] scribed: On Sat, Oct 04, 2003 at 04:25:57PM -0500, Michael D Schleif wrote: OK, this section is what I need -- thank you: http://www.modssl.org/docs/2.8/ssl_howto.html#ToC6 Correct me if I am wrong; but, this is the