in reply to Re: Two-Way Password Encryption
in thread Two-Way Password Encryption

To simplify this response...++ by the way :) authenticating by any method over SSL is preferrable.

Speaking of which does anyone know where I can get a good tool for making my own certificates. I work on mostly internal stuff, so I don't have much use for buying one from a certificate authority. The one that comes with mod_ssl is kind of clunky if you ask me.

smiles

Replies are listed 'Best First'.
Re: Re: Re: Two-Way Password Encryption
by fokat (Deacon) on May 07, 2003 at 17:46 UTC

    Give openSSL a try for self-signed certificates. It works on many platforms and has all the features you might need for this task (and then some...)

    Best regards

    -lem, but some call me fokat

[reply]
Re: Re: Re: Two-Way Password Encryption
by spartan (Pilgrim) on May 08, 2003 at 02:43 UTC
    At the apache-ssl website, they have these instructions on how to create a test certificate. I did it today as a matter of fact.
    Here's the dirt just in case you don't want to follow the link:
    how do I create a test certificate?

Step one - create the key and request:

  openssl req -new > new.cert.csr

Step two - remove the passphrase from the key (optional):

  openssl rsa -in privkey.pem -out new.cert.key

Step three - convert request into signed cert:

   openssl x509 -in new.cert.csr -out new.cert.cert -req -signkey new.cert.key -days 365

    Replace the word new-cert with a variable, and you could easily turn this into a quite simple script to spit out certificates as fast as the script will run.

    This is obviously just a way to create certificates, making your web server of choice use them, is another animal.


    Very funny Scotty... Now PLEASE beam down my PANTS!
[reply]

In Section Seekers of Perl Wisdom