RE: Orion SSL? How?

2000-07-12 Thread Jen Hsien Huang

I spend couples of days to setup SSL.
Because I am not family with security , the HOWTOs just 
say how to get a certification , but didn't say you should get
a root certification first.  I think the HOWTO should add:

get root certification from 
https://www.thawte.com/servertest.txt  save to root.cer
run the keytool to generate keystore
keytool -keystore keystore -keyalg "RSA" -import -file root.cer
then generate your certification 

if you not use JDK 1.3 you should copy orion/jsse.jar to 
/jre/lib/ext  , edit /jre/lib/security/ java.securit
and add " security.provider.2=com.sun.net.ssl.internal.ssl.Provider"

-Original Message-
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]]On Behalf Of Joseph B. Ottinger
Sent: Wednesday, July 12, 2000 5:52 PM
To: Orion-Interest
Subject: Re: Orion SSL? How?


I still haven't set up the secure site part of it yet, but key generation
was by far the hardest thing for me. What I ended up doing was using
Windows to generate the keystore file, and then transferring the keystore
file to Linux, where keytool was able to query it in proper form. As soon
as I decide on a domain to set up as a secure site, I'll have a detailed
HOWTO on orionsupport, as this issue has been critical and extremely
frustrating for me.


On Tue, 11 Jul 2000, keith kwiatek wrote:

> Hello,
> 
> I saw the brief FAQ on how to set up Orion SSL...
> 
> http://www.orionserver.com/docs/ssl-howto.html
> 
>  but I also saw alot of problems people posted trying to get it work... What is 
>the current state of instructions for getting Orion SSL to work?
> 
> What is the non-brief version of the SSL installation instructions?
> 
> Is it 128 bit encryption?
> 
> Any pointers from experienced people?
> 
> Thanks,
> Keith
> 
> 

---
Joseph B. Ottinger   [EMAIL PROTECTED]
http://cupid.suninternet.com/~joeo  HOMES.COM Developer






Re: Orion SSL? How?

2000-07-12 Thread Joseph B. Ottinger

I still haven't set up the secure site part of it yet, but key generation
was by far the hardest thing for me. What I ended up doing was using
Windows to generate the keystore file, and then transferring the keystore
file to Linux, where keytool was able to query it in proper form. As soon
as I decide on a domain to set up as a secure site, I'll have a detailed
HOWTO on orionsupport, as this issue has been critical and extremely
frustrating for me.


On Tue, 11 Jul 2000, keith kwiatek wrote:

> Hello,
> 
> I saw the brief FAQ on how to set up Orion SSL...
> 
> http://www.orionserver.com/docs/ssl-howto.html
> 
>  but I also saw alot of problems people posted trying to get it work... What is 
>the current state of instructions for getting Orion SSL to work?
> 
> What is the non-brief version of the SSL installation instructions?
> 
> Is it 128 bit encryption?
> 
> Any pointers from experienced people?
> 
> Thanks,
> Keith
> 
> 

---
Joseph B. Ottinger   [EMAIL PROTECTED]
http://cupid.suninternet.com/~joeo  HOMES.COM Developer





Re: Orion SSL? How?

2000-07-12 Thread Michael Peacock

Keith,

My experience is follow the instructions, and carefully read the
instructions between the lines. Think hard when it doesn't work (there is an
answer), and if you get really stuck, mail the list.

Rgds, Mick
- Original Message -
From: "keith kwiatek" <[EMAIL PROTECTED]>
To: "Orion-Interest" <[EMAIL PROTECTED]>
Sent: 12 July 2000 04:25
Subject: Orion SSL? How?


> Hello,
>
> I saw the brief FAQ on how to set up Orion SSL...
>
> http://www.orionserver.com/docs/ssl-howto.html
>
>  but I also saw alot of problems people posted trying to get it
work... What is the current state of instructions for getting Orion SSL to
work?
>
> What is the non-brief version of the SSL installation instructions?
>
> Is it 128 bit encryption?
>
> Any pointers from experienced people?
>
> Thanks,
> Keith
>
>