On Fri, 2016-06-17 at 15:56 +0100, Michael H wrote:> On 17/06/16 15:46, James B. Byrne wrote:> > > > We operate a private CA for our domain and have since 2005. We > > maintain a public CRL strictly in accordance with our CPS and have our > > own OID assigned. Our CPS and CRL together with our active, expired > > and revoked certificate inventory is available online at > > ca.harte-lyne.ca. Our CPS states that we will only issue certificates > > for our own domain and furthermore we only issue them for equipment > > and personnel under our direct control.> https://harte-lyne.ca/ > > net::ERR_CERT_AUTHORITY_INVALIDYour connection is not secure The owner of harte-lyne.ca has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website. -- Regards, Paul. England, EU. England's place is in the European Union.
On Sat, June 18, 2016 7:52 am, Always Learning wrote:> > On Fri, 2016-06-17 at 15:56 +0100, Michael H wrote: > >> On 17/06/16 15:46, James B. Byrne wrote: > >> > >> > We operate a private CA for our domain and have since 2005. We >> > maintain a public CRL strictly in accordance with our CPS and have our >> > own OID assigned. Our CPS and CRL together with our active, expired >> > and revoked certificate inventory is available online at >> > ca.harte-lyne.ca. Our CPS states that we will only issue certificates >> > for our own domain and furthermore we only issue them for equipment >> > and personnel under our direct control. > > >> https://harte-lyne.ca/ >> >> net::ERR_CERT_AUTHORITY_INVALID > > Your connection is not secure > > The owner of harte-lyne.ca has configured their website improperly. To > protect your information from being stolen, Firefox has not connected to > this website. >You too huh? Did you, guys read what the owner of that domain wrote? I would suggest to go back to his post, and read the whole piece he wrote, not just the paragraph you left quoted here. It is instructive. And he definitely is qualifies to run Certification Authority. And can teach how to do it. That is what he did in his post. Valeri ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++
On Sat, 2016-06-18 at 08:20 -0500, Valeri Galtsev wrote:> On Sat, June 18, 2016 7:52 am, Always Learning wrote:> > > > Your connection is not secure > > > > The owner of harte-lyne.ca has configured their website improperly. To > > protect your information from being stolen, Firefox has not connected to > > this website.> You too huh?No ! I get the similar 'Firefox version dependent' message when a new machine logs-on to a secure web site, on a non-standard port with Internet access restricted to designated individual IPs. Instead of paying money for a "proper" certificate to access sensitive restricted applications on the Internet, I make the certificates - that is the beauty of being non-Wondoze and using Centos. ;-) -- Regards, Paul. England, EU. England's place is in the European Union.