Re: Now I can be my own CA but there's more...

1999-04-29 Thread Juan Carlos Castro y Castro
Again on the same subject. Sorry for the trafic but this time I was able to build the DER format with information from the FAQ. Only it didn't work. I added the appropriate type in mime.types, copied my ca.cacert to every directory of the secure server's page tree (including the directory under cg

Re: Now I can be my own CA but there's more...

1999-04-29 Thread Juan Carlos Castro y Castro
About DER... forget it. I just found it in mod_ssl's FAQ. Duh! -- ___THE___ "Commercial OS vendors are, at the moment, all closed \ \ / / economies, and doomed to fall in their competition with \ V / open economies just as communism eventually fell." \ /

Re: Now I can be my own CA but there's more...

1999-04-29 Thread Juan Carlos Castro y Castro
I'm coming back to this thread because we finnaly put our secure server into production (self-signed). I'd like to use the suggestions below to get rid of the annoying "Unknown certificate" browser messages. (And hopefully it will work at all with IE 3). But the syntax to openssl has changed from

Re: Now I can be my own CA but there's more...

1999-03-25 Thread Alfredo Raul Pena
Axel Findling wrote: > > By the way, is there such hack to Netscape too? > > 1. You can Import the CAs Publick Key to Netscape (Steffen wrote abaout > this) and than copy the cert7.db file to another Netscape (4.x)-Profile. > > 2. You can use the Client Configuration Kit from Netscape to add a CA

Re: Now I can be my own CA but there's more...

1999-03-25 Thread Axel Findling
Hi, > By the way, is there such hack to Netscape too? 1. You can Import the CAs Publick Key to Netscape (Steffen wrote abaout this) and than copy the cert7.db file to another Netscape (4.x)-Profile. 2. You can use the Client Configuration Kit from Netscape to add a CA-Key to the 'netscape.cfg'

Re: Now I can be my own CA but there's more...

1999-03-24 Thread Alfredo Raul Pena
Steffen Dettmer wrote: > > certificate expires, IE 3 disallows access altogether. Anyway I can hack > > the Registry or something like that so IE3/4/5 users can go to my site? > > Like, adding my phony CA to IE's list of CAs? > > > > By the way, is there such hack to Netscape too? > > take a .hta

Re: Now I can be my own CA but there's more...

1999-03-24 Thread Lin Geng
OTECTED] <[EMAIL PROTECTED]> Date: Wednesday, March 24, 1999 4:10 PM Subject: Now I can be my own CA but there's more... >Carlo Marcelo Arenas Belon wrote: >> >> Juan Carlos Castro y Castro wrote: >> > >> > Hi! I just bought a Brazilian RH Linux dis

Re: Now I can be my own CA but there's more...

1999-03-24 Thread Steffen Dettmer
> certificate expires, IE 3 disallows access altogether. Anyway I can hack > the Registry or something like that so IE3/4/5 users can go to my site? > Like, adding my phony CA to IE's list of CAs? > > By the way, is there such hack to Netscape too? take a .htaccess and include the following line

Now I can be my own CA but there's more...

1999-03-24 Thread Juan Carlos Castro y Castro
Carlo Marcelo Arenas Belon wrote: > > Juan Carlos Castro y Castro wrote: > > > > Hi! I just bought a Brazilian RH Linux distribution with Apache 1.3.3 > > and mod_ssl 2.0.something. When I follow the instructions to create my > > own CA and sign the server certificate I just created, I get this i