I have ssl working on a test certificate from Thawte and await an answer
also. I also am curious if anyone has a production certificate from any CA.
I have two other questions about OrionServer and SSL:
1. Does orionserver support 128bit "supercert" from Thawte?
2. Since I don't see secure on-line ordering of OrionServer on the
orionserver.com site, should this lead me to believe that Orion themselves
can't get a production ssl certificate to work?
I would expect that Orion would be contacting both Thawte and Verisign about
placing themselves on the list of servers to choose from. At least I would
if I was trying to sell an application server.
Dale
----- Original Message -----
From: Robert Krueger <[EMAIL PROTECTED]>
To: Orion-Interest <[EMAIL PROTECTED]>
Sent: Saturday, August 19, 2000 7:46 AM
Subject: Re: Help - SSL Usage in Production - is it really possbile?
mike,
have you contacted [EMAIL PROTECTED] about this? they should care
very much if one of their (or the ?) first customers to use orion with ssl
in production has that many difficulties. your problems may indicate that
ssl support only has proof-of-concept but not production quality which is
something they should (and probably will) really get out of the way quickly.
one thing you could do as a temporary workaround is use apache with
mod_proxy and mod_ssl as an ssl-proxy. of course that only works if you
don't need to access certificate information in your app. but if you just
need to make sure parts of your app are protected by ssl this should work
(with a performance hit of course).
robert
(-) Robert Krüger
(-) SIGNAL 7 Gesellschaft für Informationstechnologie mbH
(-) Brüder-Knauß-Str. 79 - 64285 Darmstadt,
(-) Tel: 06151 665401, Fax: 06151 665373
(-) [EMAIL PROTECTED], www.signal7.de
