Unit193 | Somehow had missed that a cert had expired for a subdomain, so had to get that taken care of.. | 00:10 |
---|---|---|
PCLine_ | Good evening | 00:12 |
Unit193 | Howdy. | 00:14 |
PCLine_ | Dont know what you are talking about or whom you are talking toooo. But I want a Self Signed Cert for my internal stuff :( | 00:19 |
Unit193 | Was kind of general, but another user asked a few hours ago how things were going. :P | 00:20 |
Unit193 | Self-signed can be useful, but one browsers trust is handy. | 00:20 |
Unit193 | (But yes, if it's internal it doesn't matter, and in some cases can be better.) | 00:21 |
Unit193 | Since it's only for my personal stuff, I can hardly justify buying a good cert, but yet I do see a reason to have TLS support, so I end up using StartSSL's cert(s). | 00:22 |
PCLine_ | to start I need it for my Powershell Stuff. I created one but have not figure out how to copy it to another computer. | 00:23 |
PCLine_ | next will be for Remote Desktop ( I thought I read somewhere I could use 1 for that also ). | 00:24 |
PCLine_ | just anything item on my wish list. | 00:24 |
PCLine_ | wow... that didnt come out right .... Just another item on my wish list! | 00:25 |
thafreak | PCLine_: look at tinyca2 in the ubuntu/debian repositories | 01:56 |
thafreak | It's a gui for creating your own CA, and then creating your own certs signed by your own CA | 01:56 |
thafreak | makes it REALLY easy | 01:57 |
thafreak | Then just add your CA's cert in all your trust stores and any of the cert's you created will be trusted | 01:57 |
Unit193 | Wow, didn't know about that, did it all manually when I did it. >_< | 02:00 |
thafreak | haha, yeah tinyca is kinda awesome | 02:00 |
PCLine_ | Thanks - I am looking for it now. | 02:04 |
Unit193 | thafreak: Thanks, though by the time I end up needing it I'll forget the name. :P | 02:29 |
Unit193 | Still teaching? | 02:29 |
PCLine_ | Got it....Export DER....I think. | 02:38 |
PCLine_ | Thank you thafreak. My Powershell script is signed and running on 2 computers. | 03:38 |
Unit193 | Heh, on the one site, not only is the cert for the old domain, it's also expired. :3 | 05:00 |
cyberanger | I like tinyca myself, I recall some reason I went with easyrsa though, a key size limit I think | 05:01 |
Unit193 | I should either replace it with another selfsigned, or actually get a basic cert. | 05:01 |
cyberanger | I wound up doing it cause it was easier for internal use, all the WebUI stuff sales likes | 05:03 |
cyberanger | Also used it to teach a lesson on cert trust a time or two (MitM attacks are fun...in the confines of a lab) | 05:04 |
Unit193 | Hmm, don't see that one in the archive. | 05:05 |
cyberanger | Unit193: it's a part of OpenVPN, but it's uses aren't limited to OpenVPN | 05:06 |
Unit193 | Ahh, I see. | 05:06 |
cyberanger | it's just meant to simplify some things so it's not less straight forward openssl commands | 05:07 |
cyberanger | many people have internal CA's and don't know it, for that reason | 05:07 |
yano | http://www.meetup.com/Central-Ohio-Python-Users-Group/events/220005006/ | 14:28 |
jenni | [ CohPy January Meeting - The Central Ohio Python Users Group (Columbus, OH)- Meetup ] - https://j.mp/1BQDqyA | 14:28 |
Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!