on 2/9/02 12:00 AM, Aakash  Malhotra at [EMAIL PROTECTED]
wrote:

> 
> Thanks David for your prompt reply
> 
> I will attempt to download apache for windows and try it. regarding
> certificates, is there a way to do it in windows ? any howto's or man pages ?
> 
> thanks again david
> 
> -aakash

 I've had good luck generating certificates on a box running NT 4, for use
with our web server (Win2K w/IIS). Someday I'll figure out how to get 'em to
stop warning everyone they're roll yer owns too.

Unless JB's batch files can do that? Can you even do that? Besides faking
it's from verity or some such? (Netscape on the mac doesn't get along well
with my certs because of this. Oh well. Least I can mandate a browser. Still
bugs me tho...)

Never mind. Just checked, and the latest version of Netscape Communicator
for the mac doesn't choke on my certificates anymore! YAY!

Just because I'm curious... I know you pay the 'official' signers money, and
mostly that's for verification of identity... is there something like the
deal with pgp and the 'open' key-servers?
I guess SSL where the connection is secure without HAVING to have a
'verified' identity? I'm probably way off here as I'm just a dabbler at the
most, in both SSL and PGP (crypto in general). Heck, I was giddy when
openSSL compiled without errors on the first attempt (Props on that). And
when I generated my first loadable cert... that was sheer joy.

There's just something that bothers me about having to pay people to be
'trusted'. Maybe you don't have to. Guess yall are the ones who'd know,
right? Am I missing some obvious bit of whatnot? (quite possible. and
likely, even) Are there public [trusted] cert-signers? Or does that defeat
the whole idea with SSL?

Apologies for improper terminology and the like. Also this is just idle
wondering on my part, that I'll surely get the answers to when I have to
have 'em. Maybe even before. These aren't burning questions, and private
reply's are kewl. Mostly I just wanted to say 'works great on my Win boxen',
and give some thanks/props. (;

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to