RE: Creating a UK CSR
I've just double-checked what I've said in my last posting, and I'm wrong on at least two counts (probably more). According to Thawte (and it probably isn't much different for anyone else). 1. The State within an SSL certificate must be an actual place, it cannot be a postcode. This is annoying to UK users as some places do change county. There are of course several unitary authorities who cannot be considered to be in a county. For example, when entering Bristol you'll see Welcome to the City and County of Bristol on the signs (ie, it isn't in Avon anymore). I've yet to hear whether we are OK to use Peterborough as both City and State. When I do I'll let the list know. 2. You can amend your CSR before the certificate is issued. Once the certificate is issued you would then have to start the process again, ie pay twice. Sorry if I've messed up your CSR! - John Airey Internet Systems Support Officer, ITCSD, Royal National Institute for the Blind, Bakewell Road, Peterborough PE2 6XU, Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] -Original Message- From: matt [mailto:[EMAIL PROTECTED]] Sent: 10 July 2001 18:01 To: [EMAIL PROTECTED] Subject: Creating a UK CSR Hey All, Just a quickie on UK certs. Can I just leave state blank, and use London for locality, or should I use London for both? Also GB is the correct ISO country code right? Thanks, Matt __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
RE: Creating a UK CSR
Hey all,
I checked out the Thawte IRC support, and was told there that
I should just put London twice, once for state and once for
location.
I now have my certificate and its all OK, and works fine (cleared
up some Macintosh IE5 problems too.)
So thanks all for the help you've given, I'm now running a modssl
with Apache and I think I understand most of the important issues!
Matt
--
#!/usr/bin/perl
$A='A';while(print+($A.=(grep{($A=~/(...).{78}$/)[0]eq$_} A A A
=~m{(...)}g)?A: )=~/([ A])$/){if(!(++$l%80)){print\n;sleep 1}}
__
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]
RE: Creating a UK CSR
I don't think it matters that much. Some areas of London fall into other counties (eg Middlesex), so you can put that. I'm based in Peterborough, which is now a unitary authority so it is no longer in Cambridgeshire. Our next SSL certificate will reflect this change. ISO 3166-1 defines GB as our country code (I have a copy by my desk as it's extremely useful for tracking where visitors to our sites come from). IMHO ICANN made a stupid mistake in allowing the use of the non-standard UK. But I digress... Actually towns and areas do change County from time to time. It is probably a better idea to use your postcode instead for state, as these never change. For example, Belvoir Castle recently moved from Nottinghamshire to Leicestershire (where it had been all the time), but retains a Nottingham postcode. Whatever you choose, you normally can't change it once you submit your CSR, not unless you like to pay your CA twice. - John Airey Internet Systems Support Officer, ITCSD, Royal National Institute for the Blind, Bakewell Road, Peterborough PE2 6XU, Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED] -Original Message- From: matt [mailto:[EMAIL PROTECTED]] Sent: 10 July 2001 18:01 To: [EMAIL PROTECTED] Subject: Creating a UK CSR Hey All, Just a quickie on UK certs. Can I just leave state blank, and use London for locality, or should I use London for both? Also GB is the correct ISO country code right? Thanks, Matt __ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager[EMAIL PROTECTED]
