> From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org] > On Behalf Of Matt Disney > > Is anyone doing something you like for managing SSL CA certs (for example, > distributing your own internal CA cert) on a broad range of operating systems > and browsers in a work/enterprise environment? > Windows+IE is easy enough through AD. It's all the other stuff I'm wondering > about (Mac, Linux, Firefox, Chrome, Safari, other?).
Windows, Mac, and Linux all have something functionally equivalent. A per-user key manager built into the OS. You can do machine certs and/or user certs. As far as I'm concerned, the main value-add that AD gives you is ease of issuing and tracking those certs. Otherwise you have to figure stuff out on the openssl commandline, which can be either brainlessly simple, or completely rocket science. Here's a question: Does anybody know something like a web interface to something like a linux based CA server, to make the issuance of certificates easier? Similar to the IIS interface to AD Cert manager? _______________________________________________ Tech mailing list Tech@lists.lopsa.org https://lists.lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
