Re: certificate expiration in hours

2009-06-05 Thread Kyle Hamilton
Proxy certificates aren't appropriate for this application. I was simply giving an example of why certificate expirations in hours are reasonable things to support. -Kyle H On Thu, Jun 4, 2009 at 4:13 PM, Lucas Mocellin wrote: > > > On Thu, Jun 4, 2009 at 2:31 PM, Ger Hobbelt wrote: >> >> On Th

Re: certificate expiration in hours

2009-06-04 Thread Lucas Mocellin
On Thu, Jun 4, 2009 at 2:31 PM, Ger Hobbelt wrote: > On Thu, Jun 4, 2009 at 5:41 PM, Lucas Mocellin > wrote: > > Also I'll try to explain: > > > > I have 2 types of users: supervisors and students > > > > this system is to authenticate students to perform a "online test", BUT > the > > superviso

Re: certificate expiration in hours

2009-06-04 Thread Kyle Hamilton
How about a proxy certificate? -Kyle H On Thu, Jun 4, 2009 at 7:23 AM, Michael Sierchio wrote: > Lucas Mocellin wrote: > >> I would like to generate a certificate valid in hours, does someone know >> how to do it? is that possible or I have to manage this hours "by myself"? > > Why?  What kind o

Re: certificate expiration in hours

2009-06-04 Thread Ger Hobbelt
On Thu, Jun 4, 2009 at 5:41 PM, Lucas Mocellin wrote: > Also I'll try to explain: > > I have 2 types of users: supervisors and students > > this system is to authenticate students to perform a "online test", BUT the > supervisor must authorize them to do it for a given time (the test time, > usual

Re: certificate expiration in hours

2009-06-04 Thread Lucas Mocellin
Also I'll try to explain: I have 2 types of users: supervisors and students this system is to authenticate students to perform a "online test", BUT the supervisor must authorize them to do it for a given time (the test time, usually 1-3hours) For other reasons the systems will be: a Linux LiveCD

Re: certificate expiration in hours

2009-06-04 Thread Lucas Mocellin
On Thu, Jun 4, 2009 at 11:48 AM, Michael S. Zick wrote: > On Thu June 4 2009, Lucas Mocellin wrote: > > Hi, > > > > I'm sorry, I don't understand very much about, but let's try. > I'm starting to learn. > > > > > On Thu, Jun 4, 2009 at 11:23 AM, Michael Sierchio >wrote: > > > > > Lucas Mocellin

Re: certificate expiration in hours

2009-06-04 Thread Michael Sierchio
Lucas Mocellin wrote: > I'm sorry, I don't understand very much about, but let's try. Bad idea. Certs bind identity to public keys. Authentication is not authorization, and it is extremely important that you understand the semantics before proceeding, IMHO. _

Re: certificate expiration in hours

2009-06-04 Thread Michael S. Zick
On Thu June 4 2009, Lucas Mocellin wrote: > Hi, > > I'm sorry, I don't understand very much about, but let's try. > > On Thu, Jun 4, 2009 at 11:23 AM, Michael Sierchio wrote: > > > Lucas Mocellin wrote: > > > > > I would like to generate a certificate valid in hours, does someone know > > > how

Re: certificate expiration in hours

2009-06-04 Thread Lucas Mocellin
Hi, I'm sorry, I don't understand very much about, but let's try. On Thu, Jun 4, 2009 at 11:23 AM, Michael Sierchio wrote: > Lucas Mocellin wrote: > > > I would like to generate a certificate valid in hours, does someone know > > how to do it? is that possible or I have to manage this hours "by

Re: certificate expiration in hours

2009-06-04 Thread Michael Sierchio
Lucas Mocellin wrote: > I would like to generate a certificate valid in hours, does someone know > how to do it? is that possible or I have to manage this hours "by myself"? Why? What kind of cert? What is the intended use for the cert? If it's for the purposes of restricting access to a given

certificate expiration in hours

2009-06-04 Thread Lucas Mocellin
Hi folks, I would like to generate a certificate valid in hours, does someone know how to do it? is that possible or I have to manage this hours "by myself"? Also, I'll do it in python. Thanks, Lucas.