From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/77659 Path: news.gmane.org!not-for-mail From: Simon Josefsson Newsgroups: gmane.emacs.gnus.general Subject: Re: SSL certificate issues for git.gnus.org Date: Thu, 10 Mar 2011 22:50:11 +0100 Message-ID: <877hc663xo.fsf@latte.josefsson.org> References: <87sk71o198.fsf@lifelogs.com> <87bpdhsshj.fsf@lifelogs.com> <87y6glrcpd.fsf@lifelogs.com> <87pr1xrb7g.fsf@lifelogs.com> <87fx2tq8nx.fsf@lifelogs.com> <87r5m6gvgb.fsf_-_@lifelogs.com> <87sjvb7p4z.fsf@lifelogs.com> <8762s7n3gq.fsf@topper.koldfront.dk> <87fwrb67zq.fsf@lifelogs.com> <87wrknlnz4.fsf@topper.koldfront.dk> <8739n80x9j.fsf@lifelogs.com> <871v2rg9g4.fsf@dod.no> <87wrkj15yb.fsf@lifelogs.com> <87bp1m3kpx.fsf@lifelogs.com> <87lj0ne2cq.fsf@latte.josefsson.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1299793874 32626 80.91.229.12 (10 Mar 2011 21:51:14 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Thu, 10 Mar 2011 21:51:14 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M25982@lists.math.uh.edu Thu Mar 10 22:51:10 2011 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1PxnlF-00048p-Js for ding-account@gmane.org; Thu, 10 Mar 2011 22:51:09 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1Pxnkd-0000np-D5; Thu, 10 Mar 2011 15:50:31 -0600 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1Pxnka-0000nQ-Al for ding@lists.math.uh.edu; Thu, 10 Mar 2011 15:50:28 -0600 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx2.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1PxnkS-0001B4-VU for ding@lists.math.uh.edu; Thu, 10 Mar 2011 15:50:25 -0600 Original-Received: from yxa-v.extundo.com ([213.115.69.139]) by quimby.gnus.org with esmtp (Exim 4.72) (envelope-from ) id 1PxnkQ-0001kx-Eq for ding@gnus.org; Thu, 10 Mar 2011 22:50:18 +0100 Original-Received: from latte.josefsson.org (c80-216-4-108.bredband.comhem.se [80.216.4.108]) (authenticated bits=0) by yxa-v.extundo.com (8.14.3/8.14.3/Debian-5+lenny1) with ESMTP id p2ALoBCC017918 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for ; Thu, 10 Mar 2011 22:50:13 +0100 OpenPGP: id=B565716F; url=http://josefsson.org/key.txt Mail-Copies-To: nobody X-Hashcash: 1:22:110310:ding@gnus.org::Br1BmNHAnD3hHm/T:7U6C In-Reply-To: (Steinar Bang's message of "Thu, 10 Mar 2011 12:55:23 +0100") User-Agent: Gnus/5.110014 (No Gnus v0.14) Emacs/23.2 (gnu/linux) X-Spam-Status: No, score=-0.8 required=5.0 tests=AWL,BAYES_00, DATE_IN_FUTURE_96_XX,RDNS_DYNAMIC,SPF_FAIL autolearn=no version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on yxa-v.extundo.com X-Virus-Scanned: clamav-milter 0.96.5 at yxa-v X-Virus-Status: Clean X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:77659 Archived-At: Steinar Bang writes: >>>>>> Simon Josefsson : > >> I think anyone who is already a CACert member could help with this, by >> claiming ownership of the domain and then requesting certificates. I >> happen to be a member, so if I can help, let me know. Generating the >> private key and certificate request is relatively easy too. > > I am also a member but I though I only could request certificate signing > for sub-domains of the one I'm the member as...? You can become "owner" of any domain by entering the domain under cacert.org Domains->Add when you are logged in. The domain owner will get an e-mail to confirm the operation, but if he accepts then you can get server certificates for that domain through CACert. Of course, it is better if Lars gets an account, but to be trusted he needs to sign papers and find someone else who is a CACert member (at least that is how it used to work). But I believe it is still possible for anyone else to help out if Lars prefers to write elisp instead. :-) /Simon