Re: [gentoo-dev] CA-certified SSL

2013-02-05 Thread Rich Freeman
On Tue, Feb 5, 2013 at 1:48 PM, Alec Warner wrote: > Doesn't work on my non-gentoo OS..Perhaps we should provide debs and rpms? :) That sounds like a separate bug. We provide handbooks for that one. :) Rich (And yes, as I noted in my original post I realize that certs from a "real" CA would b

Re: [gentoo-dev] CA-certified SSL

2013-02-05 Thread Alec Warner
On Tue, Feb 5, 2013 at 10:06 AM, Rich Freeman wrote: > On Tue, Feb 5, 2013 at 11:59 AM, Dirkjan Ochtman wrote: >> I think it's really quite silly that we keep inconveniencing ourselves >> and our user by not having proper certificates that get recognized by >> all the major browsers, preferably w

Re: [gentoo-dev] CA-certified SSL

2013-02-05 Thread Dirkjan Ochtman
On Tue, Feb 5, 2013 at 7:06 PM, Rich Freeman wrote: > My knee-jerk reaction is that your browser has a bug. It thinks that > it is appropriate to sound alarms for unauthenticated SSL connections > but not for unauthenticated non-SSL connections. A workaround is to > emerge ca-certificates. > > T

Re: [gentoo-dev] CA-certified SSL

2013-02-05 Thread Rich Freeman
On Tue, Feb 5, 2013 at 11:59 AM, Dirkjan Ochtman wrote: > I think it's really quite silly that we keep inconveniencing ourselves > and our user by not having proper certificates that get recognized by > all the major browsers, preferably wildcard variants (particularly for > Bugzilla attachments).

[gentoo-dev] CA-certified SSL

2013-02-05 Thread Dirkjan Ochtman
Hi, IIRC, we currently don't have CA-certified SSL certificates on Gentoo properties because the infrastructure people who handle that kind of stuff really dislike giving up their personal information to a corporation like a CA. Would it be possible to break that logjam by volunteering for the job