SSL

[Netwrkengeer]

What are my options for setting up SSL, I'm running FreeBSD/Apache.

Is OpenSSL an acceptable SSL certificate "

http://www.openssl.org"

What is "CA"

Do you know of any Free solutions to SSL, and what are my SSL requirments.

 

[gheist]

Yes - openssl is a solution
CA -the one who signs your public key(s) (maybe yourself if you have one ssl server)

You
- generate a (?rsa) key pair
- request a signature for your public key
- sign public key your self or pay money to well-known CA like Verisign,Thawte etc
- you can make your own CA and sign your users keys too

 

[Netwrkengeer]

is it acceptable to sign a public key yourself

 

[gheist]

For myself - yes, for yourself and your clients -ask them
It encrypts your traffic anyway, only saves your money and rejects public trust on your system (like anybody outside your organization)
for first rollout you need only server key which is some way signed ( commercial signers can sign your server key later)

 

[Netwrkengeer]

OK, the app, I'm using for will be a secure area on my website and a shopping cart, will openSSL support all the users entering my site (their browsers)?

 

[axvpaa]

Hi,
it will support their browsers ( or better, if their browsers can support SSL u're kewl to go). openssl is a free solution ( secure cert cost money, try

http://www.verisign.com/

or

http://www.thawte.com/

to buy one).
alex

 

[Netwrkengeer]

So if I use openSSL I still need to purchase a Cert?

 

[gheist]

Only if it makes you feel better

 

[Netwrkengeer]

Ok, so as far as the SSL goes I know nothing about it.
can someone walk me through the general rules of SSL.

For example, How many servers do you need, why would someone choose Verisign over Openssl, what is a public trust, Basically anything you thing a person who wants it but has never heard of it before..

Thanks.

 

[gheist]

Your server owns a private key
It exports its public key that should be signed some way ( by server itself or verisign )

Public Trust - a self proclaimed status that Commercial CA's sell