Page 1 of 2 12 LastLast
Results 1 to 10 of 11

Thread: Certificates

  1. #1
    Join Date
    Sep 2009
    Location
    UK
    Posts
    291

    Default Certificates

    This seemed the best group for this, so here goes

    Can someone explain what a Root Certificate Authority is
    and how it relates to a Common Server Certificate

    I know how to make it work ( as in what to click and stick in the boxes and
    how to generate certificate for clients etc ) but I don't really get the fundamentals

    Possible this answer is going to be loooooooong so if anyone feels like
    doing me a certificate for dummies reply I would appreciate it, alternatively
    if you could point me to a good ( ideally a opensuse specific ) idiots guide
    that would be good too

    Ta

    Mal

  2. #2
    Join Date
    Aug 2010
    Location
    Chicago suburbs
    Posts
    11,400
    Blog Entries
    3

    Default Re: Certificates

    Quote Originally Posted by interele View Post
    Can someone explain what a Root Certificate Authority is
    and how it relates to a Common Server Certificate
    The system is hierarchical. The Root CA is at the top of the hierarchy. Trust is supposed flow down the hierarchy.

    In a simple arrangement, the root CA signs a server certificate, and that signature certifies the validity of the server certificate to the extent that the root CA has chosen to investigate that validity.

    In a more complex arrangement, the root CA might sign a certificate for a secondary CA, and in turn that secondary CA signs the server certificate.

    Quote Originally Posted by interele View Post
    Possible this answer is going to be loooooooong so if anyone feels like
    doing me a certificate for dummies reply I would appreciate it, alternatively
    if you could point me to a good ( ideally a opensuse specific ) idiots guide
    that would be good too
    I might post a longer "certificates for dummies" at my blog. I hope you don't mind my stealing that title. If I do decide to post that, then I'll add a link in this thread.
    openSUSE Leap 15.0; KDE Plasma 5;

  3. #3
    Join Date
    Jun 2008
    Location
    Netherlands
    Posts
    24,280

    Default Re: Certificates

    I would appreciate a "Certificates for dummies". Blog, or otherwise.
    Henk van Velden

  4. #4
    Join Date
    Sep 2009
    Location
    UK
    Posts
    291

    Default Re: Certificates

    Certificates for Dummies would be great - they confuse the heck out of me !

    Ta

    Mal

  5. #5
    Join Date
    Aug 2010
    Location
    Chicago suburbs
    Posts
    11,400
    Blog Entries
    3

    Default Re: Certificates

    I have now setup a Certificates for Dummies post at my blog. I hope it is useful.
    openSUSE Leap 15.0; KDE Plasma 5;

  6. #6
    Join Date
    Jun 2008
    Location
    Netherlands
    Posts
    24,280

    Default Re: Certificates

    Thanks!

    Usefull introduction.

    And calling names: there were updates in the Update repo (now about a month ago) where FF removed Diginotar from it's list of trusted CAs.
    People reading your "Certificates for dummies"carefuully will now be able to understand waht this means.
    Henk van Velden

  7. #7
    Join Date
    Aug 2010
    Location
    Chicago suburbs
    Posts
    11,400
    Blog Entries
    3

    Default Re: Certificates

    That case is an example of what I meant by "The record of CAs has been spotty."
    openSUSE Leap 15.0; KDE Plasma 5;

  8. #8
    Join Date
    Sep 2009
    Location
    UK
    Posts
    291

    Default Re: Certificates

    I meant to get back to you sooner. Thank you for the blog post
    It was very useful - best wishes

    Mal

  9. #9
    Join Date
    Sep 2009
    Location
    UK
    Posts
    291

    Default Re: Certificates

    PS

    Are you good with NFS4 as well ?????
    - See my earlier post

    ;-)

    Mal

  10. #10
    Join Date
    Aug 2010
    Location
    Chicago suburbs
    Posts
    11,400
    Blog Entries
    3

    Default Re: Certificates

    I have not used much NFS with linux. It would be better for somebody with more experience to write up something about NFS4.
    openSUSE Leap 15.0; KDE Plasma 5;

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •