And what do you think of this solution,
a self-signed certificates without CA, it's better than nothing isn't it ?
/Self signed certificates/
//
/This creates a private key and self-signed certificate.
/
//
/openssl req -x509 -newkey rsa:1024 -days 3650 -nodes -keyout key.pem -out
cert.pem/
//
/We can then use cert.pem is both the server certificate and the CA
certificate. Note that -nodes prevents the key from being encrypted./
No protection from *man in the middle*, but, it allow encryption between
server and browser no ?
Le 14/12/2011 15:03, Igor Galić a écrit :
cacert.org will issue free certificates, and, IIRC, also wildcard
certificates. They are available in *most* browsers.
Cheers,
SR.
i
Thanks for information Igor,
I find the cacert.org site, but not the IIRC site, can you give me
more
information ?
Commas, commas, and, more, commas:
IIRC == If I remember correctly
So, in context:
"cacert.org will issue free certificates, and, if I remember
correctly, also (free) wildcard certificates."
I'm not the owner of parisgeo.cnrs.fr because the root domain is the
french institution cnrs.fr, so can i create this type of certificate
?
But in that case the owner of cnrs.fr must request those
certificates.