Re: SSL Certificates

[Eric Torgersen <eric () ALBANY EDU>]

In addition to the root CA expiration issue, I have noticed that Java
doesn't ship with IPSCA included as a trusted CA.  This can be an issue
for a Java applet that makes an SSL connection back to the web server.

Eric

----------------------------------------------------------
     Eric Torgersen        Information Technology Services
Unix System Administrator  The University @ Albany
     eric () albany edu       1400 Washington Ave
     (518) 437-3665        Albany, NY 12222
----------------------------------------------------------


On Wed, 18 Mar 2009, Brian Epstein wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Security,
>
>       The only thing holding us back from IPSCA is that their Root CA expires
> 12/29/2009.  I wasn't sure what was going to happen afterward.  Does
> anyone know if this CA has been updated?
>
>       Instead, we decided to go with ssldirect.com.  If you sign up as a
> reseller, you can get SSL Certs for $11.95/year.  At this price, we
> could afford to start using them on many more services.
>
> Thanks,
> ep
>
> - --
> Brian Epstein <bepstein () ias edu>                     +1 609-734-8179
> Network and Security Officer            Institute for Advanced Study
> Key fingerprint = 128A 38F4 4CFA 5EDB 99CE  4734 6117 4C25 0371 C12A
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
>
> iD8DBQFJwO8QYRdMJQNxwSoRAh1SAKC3xgn0mLPHB5g+S1n6ayI5N6mKIQCfZwlG
> SjXbv4eGayoxpOsNtsrM7Xg=
> =mr9R
> -----END PGP SIGNATURE-----