FreeTDS Development Group

["Phil Taylor" <Phil AT lansystems.co.uk>]

In order for any server certificate to be immediately accepted by Netscape/IE 
(without the click OK box) it MUST be signed by a trusted CA (thawte, 
verisign etc etc) this is the whole point of the system !

If you were allowed to sign certificates that were then silently accepted by 
web browsers where is the guarantee that the site is actually who they say 
they are, all of the trusted CA's put registrants through quite a number of 
'hoops' to prove their identity before server certs are issued......

Sorry but that's the way it is :-(

Cheers

Phil

> -----Original Message-----
> From: Paul Tritscher [mailto:paul.tritscher AT style-web.at]
> Sent: 07 August 2003 19:04
> To: openca-users AT lists.sourceforge.net
> Subject: [Openca-Users] dump question - CA - IE netscape
> 
> 
> Hi List! 
> 
> I want to become my own Certificate Authority!
> (I didn't use openca but want to know if it works for me 
> before installing)!
> I own two openbsd webservers (with apache2) where I need a 
> certificate for 
> one of my customers! I can sign my own certificates and 
> inport them into 
> Apache but in netscape and IE it tells me, this ca is not 
> trusted and users 
> have to klick ok or install my ca-cert! Do I have to buy one 
> of those certs 
> from verysign and the like or can I do this with openca? 
> 
> Well, I didn't read that much about certs, but the customer 
> is awaiting an 
> answer, so...
> Thx for your help
> eule
> 
> 
> -------------------------------------------------------
> This SF.Net email sponsored by: Free pre-built ASP.NET sites including
> Data Reports, E-commerce, Portals, and Forums are available now.
> Download today and enter to win an XBOX or Visual Studio .NET.
> http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet
_072303_01/01
_______________________________________________
Openca-Users mailing list
Openca-Users AT lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

....................................................

CONFIDENTIALITY NOTICE:
This Email is confidential and may also be privileged. If you are not the 
intended recipient, please notify the sender (Phil AT lansystems.co.uk) 
IMMEDIATELY; you should not copy the email or use it for any purpose or 
disclose its contents to any other person.

GENERAL STATEMENT:
Any statements made, or intentions expressed in this communication may not 
necessarily reflect the view of the Company. Be advised that no content 
herein may be held binding upon the Company or any associated company unless 
confirmed by the issuance of a formal contractual document or Purchase Order.
Any Prices quoted are valid for ONE Business day only.  Calls to LAN Systems 
may be recorded for quality assurance and training purposes.

E&OE
....................................................