[arch-dev-public] cacert certificate now recognized by all browsers (hopefully)
Hi all, I add a small patch from Debian to nss yesterday which applies the cacert root certificate. Some time ago I also made KDE and Qt to use the certs from the ca-certificates package which includes the cert from cacert. So, Arch is now one of the distros where those cerst are supported. BTW: we might now be able to use such a cert for e.g. dev.archlinux.org. PS: ATM I am testing what happens when archlinux.de is exclusively accessible via https. -- Pierre Schmitz, http://users.archlinux.de/~pierre
On Fri, Oct 23, 2009 at 7:32 AM, Pierre Schmitz <pierre@archlinux.de> wrote:
Hi all,
I add a small patch from Debian to nss yesterday which applies the cacert root certificate. Some time ago I also made KDE and Qt to use the certs from the ca-certificates package which includes the cert from cacert.
So, Arch is now one of the distros where those cerst are supported.
BTW: we might now be able to use such a cert for e.g. dev.archlinux.org.
PS: ATM I am testing what happens when archlinux.de is exclusively accessible via https.
I actually did get a cert from cacert a while back, but it was no different than self-signing, so I believe I just went with that. Feel free to switch to cacert if you want, I got an email recently about the one I got expiring soon
Am Freitag 23 Oktober 2009 18:26:08 schrieb Aaron Griffin:
I actually did get a cert from cacert a while back, but it was no different than self-signing, so I believe I just went with that. Feel free to switch to cacert if you want, I got an email recently about the one I got expiring soon
Well, a verified cert is a lot better thean a self-signed; also in our case its more a nice-to-have. Did you create a wildcard certificate for archlinux.org and *.archlinux.org? Only you can create a new cert or renew the current one. (I could generate a key pair though) Maybe we can use such a cert for other things in future. (smtp, optional https, package/code signing etc.) Pierre -- Pierre Schmitz, http://users.archlinux.de/~pierre
participants (2)
-
Aaron Griffin
-
Pierre Schmitz