[737] in WWW Security List Archive
SSL and Certificates
daemon@ATHENA.MIT.EDU (John Hemming (Chief Executive Mark)
Mon Jun 5 21:51:39 1995
From: "John Hemming (Chief Executive MarketNet )" <JohnHemming@mkn.co.uk>
Date: Mon, 05 Jun 95 23:11:49 -700
To: www-security@ns2.rutgers.edu
Errors-To: owner-www-security@ns2.rutgers.edu
Jamey Maze <jnm@ornl.gov> .. he say
> I'd like to startup Netsite Commerce Server for internal-use-only and
> not have to bother with getting an RSA certificate.
> Has anyone done this? If so, what software did you use to create the keys and certificate?
> TIS/PEM maybe?
The basic question is whether or not you want it to work with
Netscape Navigator or not.
If you want it to work with Navigator then it only recognises
four certificate authorities (including RSA).
Otherwise my early browser MKNCLI.EXE will operate SSL using
non authentication of the certificate. It also has a key built
into it (not of course the one I use myself). See MKNPACK.EXE
at the ftp site below.
I have now managed to progress with Internet WorkHorse which in
its current guise is still public domain and includes (which
is particularly pertinent to this discussion)
* Key Generation
* Certificate Requests
* Financial Instructions (payments, investments, authorities)
I may have broken the certificate requests in making the other
aspects work, but it would undoubtedly be helpful to anyone
working on security because it provides various useful tools
for development.
ftp://193.119.26.70/mktnet/pub/horse.zip
The version available at that site is not the currently
developed version which includes mail server as well as client
and is close to having SSMTP (Secure Simple Mail Transmission
Protocol port 465) added. I will probably add that next week
some time - bit busy this week with other things.
They key generation routines are not superfast, but I have worked
out a magic speed improvement that I will implement some time
in the future.
This software is not covered by any of the US government's
inane export regulations as I am a UK citizen working in the
UK. However, you may infringe the RSA patents if you use it
in the USA.
John
