On Wednesday 30 August 2000, at 20 h 39, the keyboard of Lynn Winebarger 
<[EMAIL PROTECTED]> wrote:

>     I'm running the servers for a low budget non-profit, 

Me too.

> I need to know
> how to let users get their browsers to accept our CA as trusted 

For lynx, it seems to accept every certificate without asking.

For Netscape Navigator, the simplest solution is to let the users reply "Yes" 
to all the questions asked interactively when encountering for the first time 
the new certificate. Then, the certificate is OK for them (you can display it 
and edit its characteristics via the Security window, click on the little key 
at the bottom). It's certainly an issue in monkey^H^H^H^H^H^Huser support 
("Where should I click?").

For power and paranoid users, you can send the fingerprint via a secure 
channel so they can check. You deprive Verisign of some money but it wasn't an 
issue for me :-)

For MSIE, I do not know, but people working in a non-profit society certainly 
not use M$IE :-)


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to