[an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive] (none) [an error occurred while processing this directive] [an error occurred while processing this directive] [an error occurred while processing this directive][an error occurred while processing this directive]
 
[an error occurred while processing this directive] [an error occurred while processing this directive]
Skåne Sjælland Linux User Group - http://www.sslug.dk Home   Subscribe   Mail Archive   Forum   Calendar   Search
MhonArc Date: [Date Prev] [Date Index] [Date Next]   Thread: [Date Prev] [Thread Index] [Date Next]   MhonArc
 

KDE: At tilføje rod certifikat fra KMD.



OK, efter lang tids eksperimentering, fandt jeg endelig ud af hvordan jeg
kan tilføje det certifikat man henter hos

http://www.kmd-ca.dk/KMD-CA-Server.crt

Jeg ved ikke om certifikatet kan installeres direkte, men det kan
konverteres til PEM format (som kan installeres) sådan her:

openssl x509 -inform DER -outform PEM -in KMD-CA-Server.crt -out KMD-CA-Server.crt.pem

Derefter fandt jeg som sagt følgende:

-----------
Adding the ECN certificate authority to KDE:

Copy the original certificate bundle to the local user directory:
mkdir -p $HOME/.kde/share/apps/kssl/caroot
 cd /usr/local/share/apps/kssl/caroot
 cp ca-bundle.crt $HOME/.kde/share/apps/kssl/caroot
Add the ECN certificate to the end of the file ca-bundle.crt.
-----------

Man skal nok lige jurstere for stier, men hvis man putter indholdet af
filen KMD-CS-Server.crt.pem i slutningen af
$HOME/.kde/share/apps/kssl/caroot/ca-bundle.crt
kan man nu gennemføre testen på 
http://www.kmd-ca.dk/sikkerhed.asp
og den vil automatisk acceptere ssl forbindelsen. Jeg får "grønt lys", og
kan se følgende om sikkerhed:

http://www.challenge.dk/~madsdyd/linux/sslug/kmd-ca-ssl-information.png

Jeg er ikke gået videre og installeret flere certifikater (person rod
certifikat), men jeg tror godt det kan lade sig gøre.

Jeg er ved at skrive et dokument om hvordan jeg tror tingene hænger
sammen. Det skal jeg nok snart forsøge at gøre i en stand hvor det kan
postes. Indtil da, ville det være fedt hvis nogen ville kigge på hvordan
man kan installere i Netscape (der er en vejledning på www.kmd-ca.dk),
Mozilla, Galeon og Opera.

Mads

-- 
Mads Bondo Dydensborg.                               sslug@sslug
Virtually every major technological advance in the history of the human
species-- back to the invention of stone tools and the domestication of
fire-- has been ethically ambiguous.
                           - Carl Sagan (The Demon-Haunted World)



 
Home   Subscribe   Mail Archive   Index   Calendar   Search

 
 
Questions about the web-pages to <www_admin>. Last modified 2005-08-10, 20:33 CEST [an error occurred while processing this directive]
This page is maintained by [an error occurred while processing this directive]MHonArc [an error occurred while processing this directive] # [an error occurred while processing this directive] *