/srv/irclogs.ubuntu.com/2015/01/23/#ubuntu-us-oh.txt

Unit193Somehow had missed that a cert had expired for a subdomain, so had to get that taken care of..00:10
PCLine_Good evening00:12
Unit193Howdy.00:14
PCLine_Dont know what you are talking about or whom you are talking toooo.  But I want a Self Signed Cert for my internal stuff :(00:19
Unit193Was kind of general, but another user asked a few hours ago how things were going. :P00:20
Unit193Self-signed can be useful, but one browsers trust is handy.00:20
Unit193(But yes, if it's internal it doesn't matter, and in some cases can be better.)00:21
Unit193Since it's only for my personal stuff, I can hardly justify buying a good cert, but yet I do see a reason to have TLS support, so I end up using StartSSL's cert(s).00:22
PCLine_to start I need it for my Powershell Stuff.  I created one but have not figure out how to copy it to another computer.00:23
PCLine_next will be for Remote Desktop ( I thought I read somewhere I could use 1 for that also ).00:24
PCLine_just anything item on my wish list.00:24
PCLine_wow... that didnt come out right .... Just another item on my wish list!00:25
thafreakPCLine_: look at tinyca2 in the ubuntu/debian repositories01:56
thafreakIt's a gui for creating your own CA, and then creating your own certs signed by your own CA01:56
thafreakmakes it REALLY easy01:57
thafreakThen just add your CA's cert in all your trust stores and any of the cert's you created will be trusted01:57
Unit193Wow, didn't know about that, did it all manually when I did it. >_<02:00
thafreakhaha, yeah tinyca is kinda awesome02:00
PCLine_Thanks - I am looking for it now.02:04
Unit193thafreak: Thanks, though by the time I end up needing it I'll forget the name. :P02:29
Unit193Still teaching?02:29
PCLine_Got it....Export DER....I think.02:38
PCLine_Thank you thafreak.  My Powershell script is signed and running on 2 computers.03:38
Unit193Heh, on the one site, not only is the cert for the old domain, it's also expired. :305:00
cyberangerI like tinyca myself, I recall some reason I went with easyrsa though, a key size limit I think05:01
Unit193I should either replace it with another selfsigned, or actually get a basic cert.05:01
cyberangerI wound up doing it cause it was easier for internal use, all the WebUI stuff sales likes05:03
cyberangerAlso used it to teach a lesson on cert trust a time or two (MitM attacks are fun...in the confines of a lab)05:04
Unit193Hmm, don't see that one in the archive.05:05
cyberangerUnit193: it's a part of OpenVPN, but it's uses aren't limited to OpenVPN05:06
Unit193Ahh, I see.05:06
cyberangerit's just meant to simplify some things so it's not less straight forward openssl commands05:07
cyberangermany people have internal CA's and don't know it, for that reason05:07
yanohttp://www.meetup.com/Central-Ohio-Python-Users-Group/events/220005006/14:28
jenni[ CohPy January Meeting - The Central Ohio Python Users Group (Columbus, OH)- Meetup ] - https://j.mp/1BQDqyA14:28

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!