mainSavannah Administration - Support: sr #104690, cacert.org SSL Certificates

 
 

sr #104690: cacert.org SSL Certificates

Submitter:  Alessandro De Zorzi <lotabi>
Submitted:  Mon 26 Sep 2005 11:58:58 AM UTC
   
 
Category:  Savannah website Priority:  5 - Normal
Severity:  1 - Wish Status:  Done
Privacy:  Public Assigned to:  Beuc
Operating System:  None Open/Closed:  Closed

Discussion locked!

Jump to the original submission

  Spam posted by susancai
Sat 13 Sep 2008 02:35:43 PM UTC, comment #8: 

We installed certificates from cacert.org at savannah.gnu.org and savannah.nongnu.org. Comments welcome :)

Sylvain Beucler <Beuc>
Wed 23 Apr 2008 10:46:22 AM UTC, comment #7: 

For your info, cacert has changed it's license for it's software and it's now GPL. So I'd really welcome it if more free software projects would use and support cacert.

Hanno Boeck <hanno>
Thu 18 Jan 2007 11:09:21 PM UTC, comment #6: 

We still need to contact them. This is the tasks list.
https://savannah.gnu.org/maintenance/TasksList

Sylvain Beucler <Beuc>
Fri 13 Jan 2006 08:28:08 PM UTC, comment #5: 

Michael pointed:

> Perhaps we should make our own CA, as it's simple to do.
> This would make life simple for us.


I'd rather use the existing one, as people may already have included it in their browsers.

Or, we can use CAcert.org, since it is an interesting service to support. Note that the CAcert.org certificate is included in the 'ca-certificates' Debian package. Certificate generation is automatic, and is not less secure that what we currently have, though it may end up more secure (with CAcert.org included in browsers, which the current Savannah CA never will).

However, again, there's no point in supporting CAcert.org if they foster non-free software. In such case we might as well get free certificates from StartCom.

Sylvain Beucler <Beuc>
Fri 13 Jan 2006 09:38:13 AM UTC, comment #4: 

http://www.cacert.org/src-lic.php is clearly non-free.

I contacted RMS about what we can do to fight this.

Sylvain Beucler <Beuc>
Fri 06 Jan 2006 11:01:25 AM UTC, comment #3: 

On second thought that doesn't sound bad.
I need to investigate a bit more the trust mecanism.

Sylvain Beucler <Beuc>
Tue 27 Sep 2005 07:20:26 AM UTC, comment #2: 

I agree. But Debian package provide it. I hope firefox and other browsers will include it in future.

I installed root CAcert certificate. Is better than self-sign certificate ;-)


Alessandro De Zorzi <lotabi>
Mon 26 Sep 2005 06:53:10 PM UTC, comment #1: 

They are not included in common browsers afaics and thus only provide additional constraints.

Sylvain Beucler <Beuc>
Mon 26 Sep 2005 11:58:58 AM UTC, original submission:  

Why you do not use CAcert.org to sign SSL Certificates?

Alessandro De Zorzi <lotabi>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by susancai (Posted a comment)
  • -email is unavailable- added by hanno (Posted a comment)
  • -email is unavailable- added by Beuc (Posted a comment)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 9 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2010-12-17 Beuc Discussion LockNone Locked
    2008-09-13 Beuc StatusNeed Info Done
    2007-01-18 Beuc Open/ClosedOpen Closed
    2006-01-06 Beuc StatusDone Need Info
        Open/ClosedClosed Open
    2005-09-26 Beuc StatusNone Done
        Assigned toNone Beuc
        Open/ClosedOpen Closed
    2005-09-26 lotabi Carbon-Copy- Added -email is unavailable-

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code