[LogAnalysis] Details on the cert issue

From: Tina Bird (tbird@precision-guesswork.com)
Date: Wed Aug 14 2002 - 09:14:39 PDT

  • Next message: Tina Bird: "[LogAnalysis] Details on the Certificate Problems"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    People who are concerned about the errors their browsers generate when
    going to the list administration pages will want to read the rest of this.
    
    The Shmoo Group has created its own root certificate, which can be
    downloaded and used to verify the cert for the admin pages.  While this
    seems a little circular to yours truly, let's face it:  it's not like most
    of us do much more work than that to "validate" a Verisign cert, and then
    there's IE...if one believes in the Web of Trust then I can personally
    vouch for this being the cert that Pablos created, and for
    mail.iocaine.com and lists.shmoo.com being the same machine.
    
    To "fix" the error with regard to mismatched hostnames, just use
    
    https://mail.iocaine.com/mailman/listinfo/loganalysis or
    https://mail.iocaine.com/mailman/listinfo/vpn
    
    instead of the lists.shmoo.com link I sent out earlier. Please rant to me
    about this off-list.
    
    And in the meantime, someone please post something to do with logs???  Or
    VPN???
    
    your moderator -- tbird
    
    - ---------- Forwarded message ----------
    Date: Mon, 12 Aug 2002 14:48:01 -0700
    From: Paul Holman <pablosat_private>
    To: Tina Bird <tbird@precision-guesswork.com>
    Subject: Re: [logs] List migration (fwd)
    
    Yes, this is what happens when you roll your own cert instead of
    contributing to the Verisign monopoly.  There is a root at
    <https://mail.iocaine.com/keys/ShmooClass1CACert.der> which people are
    welcome to load.  They should use mail.iocaine.com as a hostname if they
    want the cert to work.  Any other hostname, including lists.shmoo.com
    will cause warnings in the browser.  Sad, but we're stuck with this for
    now.  I'd encourage people to load the root.
    
    pablos.
    
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.6 (FreeBSD)
    Comment: Made with pgp4pine 1.76
    
    iD8DBQE9WoH22pLh/8byVUERAkSOAKDyujBKnWMA2Z9cCYnz5KBf4HWw1ACgr0RC
    RCvdRDY9e6a5O+rE77xoGSM=
    =IFVv
    -----END PGP SIGNATURE-----
    
    
    _______________________________________________
    LogAnalysis mailing list
    LogAnalysisat_private
    https://lists.shmoo.com/mailman/listinfo/loganalysis
    



    This archive was generated by hypermail 2b30 : Thu Aug 15 2002 - 17:34:52 PDT