[Sussex] SSL

[Iain Stevenson]

If you don't have an officially signed cert you'll also get fed up with 
those browser messages about unrecognised certificates ....

I finally forked out for a signed certificate from this lot (via an ISP) 
http://certs.ipsca.com  It works with Mozilla (Linux and Mac), and the PC 
version of IE but the Mac IE (OS9) barfs.  The site lists compatibility.

I also have one of the free Thawte email certficates but they're not 
suitable for securing web servers.

  Iain



--On Wednesday, January 8, 2003 6:53 am +0000 Dominic Clay 
<dominic.clay at btinternet.com> wrote:

> Well, yes, Certification would have to be done officially, the connection
> would be for an external web mail system used for contractors and
> financial partners, etc to have internal mail access without giving them
> a vpn.
>
> Dominic
>
>
> ----- Original Message -----
> From: "Mark Harrison" <mark.harrison at ekingfisher.com>
> To: <sussex at mailman.lug.org.uk>
> Sent: Tuesday, January 07, 2003 10:53 PM
> Subject: RE: [Sussex] SSL
>
>
> Is self-certification a big problem given the application is mail
> access?
>
>
>
> -----Original Message-----
> From: Paul Turner [mailto:pkturner at f2s.com]
> Sent: 7 January 2003 21:51
> To: sussex at mailman.lug.org.uk
> Cc: dominic.clay at europrospectus.com
> Subject: Re: [Sussex] SSL
>
>
> Dominic,
>
> I did this a while back on Redhat 6.2 and Apache.  It involved
> downloading the source for Apache and OpenSSL and compiling them both.
> If your lucky there might be an rpm out there with SSL support already,
> but I couldn't find one at the time.
>
> You do not have to purchase a certificate, you can create your own, but
> then you are authenticating yourself which is fine for testing or
> internal only access.
>
> There is some fairly good documentation in a book that I have at work.
> "Linux Apache Web Server Administration" by Charle Aulds.  See here
> http://www.amazon.co.uk/exec/obidos/ASIN/0782141374/ref=sr_aps_books_1_1
> /026-7439741-5084463 for more info.  I have a copy at work which I'll
> happily lend you, but I'm off till next week so I can't get it before
> then.
>
> Hope this helps you.
>
> Paul.
>
> On Fri, 3 Jan 2003 14:48:21 -0000
> Dominic Clay <dominic.clay at europrospectus.com> wrote:
>
>> Hi guys,
>>
>> With my attempt to introduce some form of web mail access here, there
>> becomes a requirement for SSL.
>>
>> I know nothing about SSL, apart from:
>>
>> 1.It is slow big stylee
>> and 2.I need to pay for a certificate...
>>
>> Anyone know a good internet resource for a informative (and clear!)
>> read on the subject? (Maybe SSL could be our next chat/seminar at the
>> meet.... I vote for SSL :)
>> )
>>
>> Cheers,
>> Dominic
>>
>> _______________________________________________
>> Sussex mailing list
>> Sussex at mailman.lug.org.uk
>> http://mailman.lug.org.uk/mailman/listinfo/sussex
>
> _______________________________________________
> Sussex mailing list
> Sussex at mailman.lug.org.uk
> http://mailman.lug.org.uk/mailman/listinfo/sussex
>
> ________________________________________________________________________
> This email has been scanned for all viruses by the MessageLabs SkyScan
> service. For more information on a proactive anti-virus service working
> around the clock, around the globe, visit http://www.messagelabs.com
> ________________________________________________________________________
>
> _______________________________________________
> Sussex mailing list
> Sussex at mailman.lug.org.uk
> http://mailman.lug.org.uk/mailman/listinfo/sussex
>
>
> _______________________________________________
> Sussex mailing list
> Sussex at mailman.lug.org.uk
> http://mailman.lug.org.uk/mailman/listinfo/sussex
>