RE: [cobalt-developers] Thawte

["Malcolm Wild" <cobaltsec@xxxxxxxxxxx>]

it my speciality :) i wrote a book on SSL!

however on the RaQ3/4
first you enable SSL from the siteadmin, (you'll need a unique IP per site
on the Raq all they all share the same cert!)
then make your own certificate, using the information text fields (company
name, location, etc)
this makes a Certifcate Signing Request (CSR)
the raq can then use this to "Generate a self signed Cert" which works
perfect but IE and NS open a popup nag window because it doesn't regonise
the Root Certicate Authority (CA) because you issued it yourself!
so you'll need to use "manually entered cert"

now to get a thwate cert working:)

when you've made you CSR the raq siteadmin will show two text fields (marked
Certificate Request)
the one on the top has the CSR in it that you cut'n'paste into the thawte
site as you by a cert
when the certs is generated from thawte you paste the resulting blurb into
the bottom textfield in the raq.
Done!

with me so far.....
when your purchase a cert from thawte they need to confirm 3 bits of info
1 - you own the domain name - check the whois info
2 - your the company who own the domain exsists - e.g. your company reg
number
3 - a second piece of company info - all address must match e.g. a VAT
return document
these will need to be faxed to thawte for verfication
you'll pay $125 for a cert and once you've made it thats it, if you 've got
any of the info wrong that you entered they'll charge you again!

however you can get test cert for free from thawte, which lets you practice
the process without the cash bit!

links
http://demo.cobalt.com/demoraq.html - try the SSL interface
http://www.thawte.com/certs/server/contents.html ($125)
http://www.thawte.com - bottom left text link to - Test Certs
https://forum.getme.co.uk - self signed site - you'll see the nag about
unregonised CA

hope this helps :)



-----Original Message-----
From: cobalt-developers-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-developers-admin@xxxxxxxxxxxxxxx]On Behalf Of Jamie Rossi
(by way of Gordon Garb)
Sent: 20 February 2001 19:59
To: cobalt-developers@xxxxxxxxxxxxxxx
Subject: [cobalt-developers] Thawte


Hi
Could some decent soul put me out of my misery and let me in on how I get a
thawte certificate installed on my server.

I got as far as generating the .key file but the.crt file threw me!

regards

Jamie

_______________________________________________
cobalt-developers mailing list
cobalt-developers@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-developers