Re: howto get IE Netscape to accept CA?

2000-06-14 Thread ah_liang_taica


I am trying to find the best way to let IE/Netscape to accept our CA,
But even the certificate can be embed to next version IE/Netscape, all
end-user that use our certificate must upgrade their broswer too! It's
too hard. Maybe the best way is only to use default CA's certificate
like Verisign, Thwate, CyberTrust, KeyWitness.
any good idea?
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



Re: howto get IE Netscape to accept CA?

2000-06-14 Thread Gao Yuhang

Use the mime: application/x-x509-ca-cert 

Hazel
 
 
 Does anyone have the URL for how Netsape and/or MSIE validate or
 test then accept a CA for inclusion in their web browsers?
 
 I tried a lot of combinations on some search engines and hit a blank
 I am thinking about trying the phone and calling Redmond Washington and
 California to ask, but expect that will be difficult and at least an hour
 or more on the phone as well.
 
 I saw some emails on the list that mentioned that maybe the
 CA would pay a big fee and then have to pass an evaluation.
 
 I know that the RSA patent is expiring sept21 in the US and
 I expect that a lot more CA's will pop up like the www.equifax.com 
 With OpenSSL and some scripts like at www.openca.org and
 then proving your company is reputable and then somehow paying
 or begging the web browsers to include them as a CA then a lot of CAs
 could be popping up by the end of the year. Why not some of us?
 
 FYI, on the website for equifax:
 EQUIFAX SECURE ANNOUNCES A STRATEGIC AGREEMENT WITH C2NET TO BUNDLE
 EQUIFAX SERVER CERTIFICATES WITH THE NEW STRONGHOLD 3 SERVER PRODUCT
 ATLANTA (June 13, 2000 ) -- Equifax Secure, a unit of Equifax Inc., today
 announced that C2Net Software, Inc., has selected Equifax Secure to be the
 exclusive server-certificate provider for the latest version of its secure
 web server software, Stronghold 3.
 
 
 
 __
 OpenSSL Project http://www.openssl.org
 User Support Mailing List[EMAIL PROTECTED]
 Automated List Manager   [EMAIL PROTECTED]
 

 __
  Miss Yuhang Gao
  CERNET  Regional Network Center, 
  Dept. of Computer Sci.  Eng. 
  Southeast University,
  Nanjing 210096,
  P.R.China

  Tel:  +86-25-3794342 ext 211
  Fax: +86-25-3614842

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



RE: howto get IE Netscape to accept CA?

2000-06-14 Thread Bernard Dautrevaux

 -Original Message-
 From: Gao Yuhang [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, June 13, 2000 4:12 PM
 To: [EMAIL PROTECTED]
 Subject: Re: howto get IE  Netscape to accept CA?
 
 
 Use the mime: application/x-x509-ca-cert 

What do you mean? do you say that sending in HTTP a page with the MIME type
x-x509-ca-cert, you can install ANY CA in IE or Netscape as a trusted CA ?-

If that's true, I'm going to delete IE and Netscape from all mys systems and
only use lynx, as at least this one do not support HTTPS (I think) :-)

Regards,

Bernard

 
 Hazel
  
  
  Does anyone have the URL for how Netsape and/or MSIE validate or
  test then accept a CA for inclusion in their web browsers?
  

skipped


Bernard Dautrevaux
Microprocess Ingéniérie
97 bis, rue de Colombes
92400 COURBEVOIE
FRANCE
Tel:+33 (0) 1 47 68 80 80
Fax:+33 (0) 1 47 88 97 85
e-mail: [EMAIL PROTECTED]
[EMAIL PROTECTED]
 
__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]



howto get IE Netscape to accept CA?

2000-06-13 Thread ppruett



Does anyone have the URL for how Netsape and/or MSIE validate or
test then accept a CA for inclusion in their web browsers?

I tried a lot of combinations on some search engines and hit a blank
I am thinking about trying the phone and calling Redmond Washington and
California to ask, but expect that will be difficult and at least an hour
or more on the phone as well.

I saw some emails on the list that mentioned that maybe the
CA would pay a big fee and then have to pass an evaluation.

I know that the RSA patent is expiring sept21 in the US and
I expect that a lot more CA's will pop up like the www.equifax.com 
With OpenSSL and some scripts like at www.openca.org and
then proving your company is reputable and then somehow paying
or begging the web browsers to include them as a CA then a lot of CAs
could be popping up by the end of the year. Why not some of us?

FYI, on the website for equifax:
EQUIFAX SECURE ANNOUNCES A STRATEGIC AGREEMENT WITH C2NET TO BUNDLE
EQUIFAX SERVER CERTIFICATES WITH THE NEW STRONGHOLD 3 SERVER PRODUCT
ATLANTA (June 13, 2000 ) -- Equifax Secure, a unit of Equifax Inc., today
announced that C2Net Software, Inc., has selected Equifax Secure to be the
exclusive server-certificate provider for the latest version of its secure
web server software, Stronghold 3.



__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]