matt boex wrote:

> i just installed mod_ssl to apache.  i have been able
> to bring up a page using https://myserver/index.html.
> when the page comes up, i am prompted about the
> certificate.  is there a way to bypass the multiple
> questions and just push the certificate?

Erm... The short answer is  'No.'

When you generate your own certificate, the rest of the world doen't know
that you are really who you say you are.  I could just as easily create a
ssl certificate with your name and address, but would the site really be
matt boex?  No.

So we have this thing called "Trusted Authority" or "Certificate
Authority"  Their job is to figure out that Matt Boex the website is
really Matt Boex the person.  Of course, they charge a substantial fee
for this action. (www.verisign.com or www.thawte.com can do this
service).

When you created your own certificate, you didn't go through the process
to get into a reputable CA's list. When you loaded up your website, the
client tried to verify that the website was vouched for froma CA.

It was not.

It warned you of the circumstances with those progressive popup menus
saying stuff like "Are you really really sure this is the site you want?"





-- 
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.

Reply via email to