helpSavannah Administration - Support: sr #104690, SSL Certificates


sr #104690: SSL Certificates

Submitted by:  Alessandro De Zorzi <lotabi>
Submitted on:  Mon 26 Sep 2005 11:58:58 AM UTC  
Category:  Savannah website Priority:  5 - Normal
Severity:  1 - Wish Status:  Done
Assigned to:  Sylvain Beucler <Beuc> Operating System:  None
Open/Closed:  Closed

Discussion locked!


( Jump to the original submission)

  Spam posted by susancai
Sat 13 Sep 2008 02:35:43 PM UTC, comment #8:

We installed certificates from at and Comments welcome :)

Sylvain Beucler <Beuc>In charge of this item.
Wed 23 Apr 2008 10:46:22 AM UTC, comment #7:

For your info, cacert has changed it's license for it's software and it's now GPL. So I'd really welcome it if more free software projects would use and support cacert.

Hanno Boeck <hanno>
Thu 18 Jan 2007 11:09:21 PM UTC, comment #6:

We still need to contact them. This is the tasks list.

Sylvain Beucler <Beuc>In charge of this item.
Fri 13 Jan 2006 08:28:08 PM UTC, comment #5:

Michael pointed:

> Perhaps we should make our own CA, as it's simple to do.
> This would make life simple for us.

I'd rather use the existing one, as people may already have included it in their browsers.

Or, we can use, since it is an interesting service to support. Note that the certificate is included in the 'ca-certificates' Debian package. Certificate generation is automatic, and is not less secure that what we currently have, though it may end up more secure (with included in browsers, which the current Savannah CA never will).

However, again, there's no point in supporting if they foster non-free software. In such case we might as well get free certificates from StartCom.

Sylvain Beucler <Beuc>In charge of this item.
Fri 13 Jan 2006 09:38:13 AM UTC, comment #4: is clearly non-free.

I contacted RMS about what we can do to fight this.

Sylvain Beucler <Beuc>In charge of this item.
Fri 06 Jan 2006 11:01:25 AM UTC, comment #3:

On second thought that doesn't sound bad.
I need to investigate a bit more the trust mecanism.

Sylvain Beucler <Beuc>In charge of this item.
Tue 27 Sep 2005 07:20:26 AM UTC, comment #2:

I agree. But Debian package provide it. I hope firefox and other browsers will include it in future.

I installed root CAcert certificate. Is better than self-sign certificate ;-)

Alessandro De Zorzi <lotabi>
Mon 26 Sep 2005 06:53:10 PM UTC, comment #1:

They are not included in common browsers afaics and thus only provide additional constraints.

Sylvain Beucler <Beuc>In charge of this item.
Mon 26 Sep 2005 11:58:58 AM UTC, original submission:

Why you do not use to sign SSL Certificates?

Alessandro De Zorzi <lotabi>


No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by susancai (Posted a comment)
  • -email is unavailable- added by hanno (Posted a comment)
  • -email is unavailable- added by Beuc (Posted a comment)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 9 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2010-12-17 Beuc Discussion LockUnlocked => Locked
    2008-09-13 Beuc StatusNeed Info => Done
    2007-01-18 Beuc Open/ClosedOpen => Closed
    2006-01-06 Beuc StatusDone => Need Info
        Open/ClosedClosed => Open
    2005-09-26 Beuc StatusNone => Done
        Assigned toNone => Beuc
        Open/ClosedOpen => Closed
    2005-09-26 lotabi Carbon-Copy- => Added -email is unavailable-

    Back to the top

    Powered by Savane 3.3