Hello, If you want SSL, a server certificate is a must. It enables the client to validate the server's authenticity. If you additionally need the server to validate the client, then optionally you need a client SSL certificate. Some of our reverse proxy clients use it since some Microsoft web server applications require it but most do not need it.
Regards, Gorkem Ates On Wed, Jun 15, 2011 at 12:31, daniel cc <dan...@signedsource.com> wrote: > Thanks mate, very much appreciated :) > > Just one more question, > If I am using ICS SSLServer and ICS SSLClients, > I do need the certificate for the server but do I need to buy the PEM file > for the clients as well or how it goes? > What I know is, > Server needs CERT and client needs the PEM file as in my demo.. > > I think Comodo is good enough. > > > Thanks > > > -----Original Message----- From: Fastream Technologies > Sent: Wednesday, June 15, 2011 11:22 AM > > To: ICS support mailing > Subject: Re: [twsocket] SSL server and CLient cert. > > AFAIK Comodo is the cheapest one. > Regards, > > SubZero > On Wed, Jun 15, 2011 at 11:11, daniel cc <dan...@signedsource.com> wrote: > > Okay, >> Thanks a lot :) >> I know the different between self made and not self made now. >> How about recommendations? >> can you guys recommend any commercial certs? >> I plan to buy.. >> >> Thanks >> >> -----Original Message----- From: Francois PIETTE >> Sent: Wednesday, June 15, 2011 10:43 AM >> >> To: ICS support mailing >> Subject: Re: [twsocket] SSL server and CLient cert. >> >> Anything that works for Apache would work since they use OpenSSL as well. >> >>> >>>> >>> Thanks for the response :) >> >>> I am so sorry :(, forgot to tell... >>> I am not using SSL for web communication, I am using the SSLServer and >>> SSLClient for client to host connection. >>> I believe this has got nothing to do with Apache because there is no >>> apache used. >>> >>> >> What SZ is saying is that Apache and ICS both use OpenSSL. So any >> certificate OK for Apache is OK for OpenSSL and is OK for ICS. >> >> You can also use OpenSSL comand line utility to convert certificates for >> some format to other OpenSSL compatible format. I've done it to to convert >> a >> certificate exported from IE. >> >> -- >> francois.pie...@overbyte.be >> The author of the freeware multi-tier middleware MidWare >> The author of the freeware Internet Component Suite (ICS) >> http://www.overbyte.be >> >> -- >> To unsubscribe or change your settings for TWSocket mailing list >> please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket >> Visit our website at http://www.overbyte.be >> -- >> To unsubscribe or change your settings for TWSocket mailing list >> please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket >> Visit our website at http://www.overbyte.be >> >> -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be > -- > To unsubscribe or change your settings for TWSocket mailing list > please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket > Visit our website at http://www.overbyte.be > -- Gorkem Ates *Fastream Technologies* *Software IQ: Innovation & Quality* http://www.fastream.com | http://twitter.com/fastream | http://www.iqproxyserver.com *Sales & Support: Email:* sa...@fastream.com, supp...@fastream.com | *Intl. Hotline:* +90-312-223-2830 (weekdays, 9am-6pm *GMT+300*) Join *IQ Proxy Server Yahoo group* at http://groups.yahoo.com/group/IQProxyServer Join *IQWF Server Yahoo group* at http://groups.yahoo.com/group/IQWFServer This is a *no-nonsense* signature! Please do *join our yahoo groups for announcements of future versions* of IQ Proxy Server and IQ Web/FTP Server (traffic level is *very low*). -- To unsubscribe or change your settings for TWSocket mailing list please goto http://lists.elists.org/cgi-bin/mailman/listinfo/twsocket Visit our website at http://www.overbyte.be
