Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Free or self signed SSL certs



At 3:48 PM -0700 11/19/05, Brad Tombaugh wrote:
On Nov 19, 2005, at 3:02 PM, Dan Shoop wrote:

At 11:31 AM -0500 11/19/05, UA Domains wrote:
Can someone point me to a reference on doing a self signed SSL cert? Or free SSL certs? And how well these work with most browsers in use today.

Well they don't. They need to be shoehorned.

I may need to secure several domains (hundreds) and do not want to purchase a cert for each one.

Well that's too bad. It's the cost of doing business. --

-dhan

You might want to check out http://www.CAcert.org

CAcert.org is a community driven, Certificate Authority that issues certificates to the public at large for free.

I don't mean to piss on the parade, but...

Remember that the CAs has to be "in" the browser for this to work nicely. Otherwise you need to shoehorn in the CA to every browser. Not what you're probably looking for, but may be acceptable if you're looking to just secure your site(s) for use in your own organization. Maybe.

Currently the list of browsers that CAcert.org supports is pitifully low, and not going to help your OS X or Windows users. Unless they're using Linux, they're still SOL. They're not even in Mozzilia yet.

From their FAQ:
"Thanks for your concerns - getting the CAcert root cert included into Mozilla is indeed probably our largest challenge right now, but one we are actively engaged in."


"We found when we first started down this road that the typical way a vendor got included into a major browser's root store was simply by paying whatever fees were demanded. In Microsoft's case with Internet Explorer, they don't care really who's included or who is not, but insist only that you pass a Webtrust audit and if so, you're eligible for inclusion. Our problem is that the audit costs in the neighborhood of $75,000 with a yearly +$10,000 fee. For CAcert, as a non-profit organisation that is simply out of the question (at least in the forseeable future)."
--


-dhan

------------------------------------------------------------------------
Dan Shoop                                                   AIM: iWiring
Systems & Networks Architect                     http://www.iwiring.net/
email@hidden                                 http://www.ustsvs.com/

pgp key fingerprint: FAC0 9434 B5A5 24A8 D0AF  12B1 7840 3BE7 3736 DE0B

iWiring provides systems and networks support for Mac OS X, unix, and
Open Source application technologies at affordable rates.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Free or self signed SSL certs (From: UA Domains <email@hidden>)
 >Re: Free or self signed SSL certs (From: Dan Shoop <email@hidden>)
 >Re: Free or self signed SSL certs (From: Brad Tombaugh <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.