From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/77650 Path: news.gmane.org!not-for-mail From: Simon Josefsson Newsgroups: gmane.emacs.gnus.general Subject: Re: SSL certificate issues for git.gnus.org Date: Thu, 10 Mar 2011 10:44:53 +0100 Message-ID: <87lj0ne2cq.fsf@latte.josefsson.org> References: <87sk71o198.fsf@lifelogs.com> <877ho8l427.fsf@gate450.dyndns.org> <878w8mij14.fsf@gate450.dyndns.org> <87bpdhsshj.fsf@lifelogs.com> <87y6glrcpd.fsf@lifelogs.com> <87pr1xrb7g.fsf@lifelogs.com> <87fx2tq8nx.fsf@lifelogs.com> <87r5m6gvgb.fsf_-_@lifelogs.com> <87sjvb7p4z.fsf@lifelogs.com> <8762s7n3gq.fsf@topper.koldfront.dk> <87fwrb67zq.fsf@lifelogs.com> <87wrknlnz4.fsf@topper.koldfront.dk> <8739n80x9j.fsf@lifelogs.com> <871v2rg9g4.fsf@dod.no> <87wrkj15yb.fsf@lifelogs.com> <87bp1m3kpx.fsf@lifelogs.com> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1299750381 874 80.91.229.12 (10 Mar 2011 09:46:21 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Thu, 10 Mar 2011 09:46:21 +0000 (UTC) Cc: ding@gnus.org To: Ted Zlatanov Original-X-From: ding-owner+M25972@lists.math.uh.edu Thu Mar 10 10:46:14 2011 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1PxcRd-0002ge-Tw for ding-account@gmane.org; Thu, 10 Mar 2011 10:46:10 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1PxcQn-0005wM-Po; Thu, 10 Mar 2011 03:45:17 -0600 Original-Received: from mx1.math.uh.edu ([129.7.128.32]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PxcQk-0005vt-9q for ding@lists.math.uh.edu; Thu, 10 Mar 2011 03:45:14 -0600 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx1.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1PxcQb-0001BO-48 for ding@lists.math.uh.edu; Thu, 10 Mar 2011 03:45:09 -0600 Original-Received: from yxa-v.extundo.com ([213.115.69.139]) by quimby.gnus.org with esmtp (Exim 4.72) (envelope-from ) id 1PxcQX-0007O5-Jn for ding@gnus.org; Thu, 10 Mar 2011 10:45:01 +0100 Original-Received: from latte.josefsson.org (c80-216-4-108.bredband.comhem.se [80.216.4.108]) (authenticated bits=0) by yxa-v.extundo.com (8.14.3/8.14.3/Debian-5+lenny1) with ESMTP id p2A9irYE010392 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT); Thu, 10 Mar 2011 10:44:54 +0100 OpenPGP: id=B565716F; url=http://josefsson.org/key.txt Mail-Copies-To: nobody X-Hashcash: 1:22:110310:tzz@lifelogs.com::dIK4Ik/xoHCkV0fw:64YH X-Hashcash: 1:22:110310:ding@gnus.org::6FwvGg3DcMlLpdUd:g/aP In-Reply-To: <87bp1m3kpx.fsf@lifelogs.com> (Ted Zlatanov's message of "Mon, 07 Mar 2011 11:26:50 -0600") User-Agent: Gnus/5.110014 (No Gnus v0.14) Emacs/23.2 (gnu/linux) X-Spam-Status: No, score=-0.8 required=5.0 tests=AWL,BAYES_00, DATE_IN_FUTURE_96_XX,RDNS_DYNAMIC,SPF_FAIL autolearn=no version=3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on yxa-v.extundo.com X-Virus-Scanned: clamav-milter 0.96.5 at yxa-v X-Virus-Status: Clean X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:77650 Archived-At: Ted Zlatanov writes: > On Sat, 05 Mar 2011 13:04:01 +0100 Lars Magne Ingebrigtsen > wrote: > > LMI> Steinar Bang writes: >>> Just supplementing Ted's statement: >>> To be able to request a cacert.org signed certificate for git.gnus.org, >>> you need to be able to receive and respond to, email sent to >>> hostmaster@git.gnus.org. > > LMI> Ok; I've now set up MX for git.gnus.org, and directed hostmaster to > LMI> myself, so request away... > > On Sat, 05 Mar 2011 21:00:06 +0100 Steinar Bang wrote: > > SB> It has to be done by you > SB> https://www.cacert.org/index.php?id=1 > > SB> It would also probably be best to sign up for the domain gnus.org > SB> (meaning that you must control the email address hostmaster at gnus.org), > SB> and then from that loging create certificates for subdomains, like > SB> eg. git.gnus.org. > > Sorry, I can't enter the data for you. You need the date of birth and a > passphrase to become a CACert member. I wish it could be easier. I think anyone who is already a CACert member could help with this, by claiming ownership of the domain and then requesting certificates. I happen to be a member, so if I can help, let me know. Generating the private key and certificate request is relatively easy too. /Simon