From owner-freebsd-isp Sun Jun 2 22:51:12 2002 Delivered-To: freebsd-isp@freebsd.org Received: from opium.co.za (opium.co.za [196.34.165.210]) by hub.freebsd.org (Postfix) with ESMTP id 6010537B406 for ; Sun, 2 Jun 2002 22:51:08 -0700 (PDT) Received: from mark (helo=localhost) by opium.co.za with local-esmtp (Exim 3.34 #1 (Debian)) id 17Ekjw-0008H9-00; Mon, 03 Jun 2002 07:50:48 +0200 Date: Mon, 3 Jun 2002 07:50:48 +0200 (SAST) From: Mark Bojara X-X-Sender: mark@opium.co.za To: James Cc: freebsd-isp@freebsd.org Subject: Re: SSL certificates In-Reply-To: <20020603000526.GA5542@stardust.darkspire.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org so do I have to have a physical link to a .pem file or can I use the certificate on a SSL site and it will ask them to install it? ---------------------------------------------------------------- Cleanliness is next to clean-limbed, in the dictionary. ---------------------------------------------------------------- On Sun, 2 Jun 2002, James wrote: >Thus spake Mark Bojara (mark@mics.co.za): > >> This is hardly a FreeBSD question but rather a apache question. Is it >> possible for me to generate my own CA certificate then sign a RA >> certificate with it to not get that option in Internet Explorer asking me >> to accept the certificate everytime I go to the site. > > Yesh. You'll need to put your CA certificate (not private key) > somewhere on your website. x509 format is fine, that'll work with all > browsers. Then direct your viewers to it and ask them to trust it. > When they click on the URI to your cert IE will automatically start a > wizard allowing them to import your CA certificate. > >-- > James Nine wolves under an > uri: http://oneiros.darkspire.net/ elm. Three trout darting in a > 1024D/62C2F77D river. Two doves fly. > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message