Tag Info

Hot answers tagged

8

Comodo have a root certificate whose public key is included in your web browser. The private key that matches the public key is used to sign SSL certificates that Comodo issue, and it can't be faked because no one else has the private key that matches the public key in the web browser.


3

The name verification is guided by RFC 2818 Section 3.1, more specifically on wildcards: Matching is performed using the matching rules specified by [RFC2459]. If more than one identity of a given type is present in the certificate (e.g., more than one dNSName name, a match in any one of the set is considered acceptable.) Names may contain the ...


2

A more discript Uri is probably better, provided its not unnecessairly long. Something to take into account, in the example you provide you have tires within spare parts, what about new tires where do they go? What if in the future you start selling bike tires? I would probably do something like this to maximize data available: ...


2

Try adding -keysize 2048 Source: CSR Generation: Java-based Webservers (using keytool)


1

It's a common mistake to think that when you create your own SSL certificate they are self-signed. You can also create your own CA, and sign your certificates with it (yeah, the CA certificate will be self signed too, but so are the "real" CA certificates - every certificate chain is started by the CA certificate, and CA is created from scratch). The main ...


1

It's important to understand that SSL certificates come in two "flavors": Self-signed - In which case, you generate them entirely on your own with no additional cost. CA-signed - In which case, a recognized certificate authority (Symantec, GeoTrust, GoDaddy, etc) signs the cert. Is this a public facing website? If so, then I'd strongly suggest ...


1

EV/High Assurance SSL certs use unique object IDs that are inserted into the extended policy field of the SSL certificate. Most applications (browsers) that support EV-SSL have this OID and CA fingerprint hard coded into them. When they get a successful match, the browser then displays the extended data. You don't mention your usage case, but if this is ...


1

Generating your own self signed SSL certificates is a bit of a challenge if you've only dabbled in web design. A good tutorial is here http://www.akadia.com/services/ssh_test_certificate.html You should at least call Barracuda and ask them what they can help you with since you use their service.



Only top voted, non community-wiki answers of a minimum length are eligible