User Tools

Site Tools


build:security

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
build:security [2012/12/10 22:41]
127.0.0.1 external edit
build:security [2012/12/14 17:43] (current)
Admin Small fixes.
Line 1: Line 1:
 ===== SSL Certificate ===== ===== SSL Certificate =====
  
-We need SSL certificates to run HTTPS on Apache. We'll probably need SSL certificates to add TLS to SMTP (Postfix) and IMAP later. Not sure if we'll be able to use the same certificate for those or not.+We need SSL certificates to run HTTPS on Apache. We'll probably need SSL certificates to add TLS support ​to SMTP (Postfix) and IMAP later. Not sure if we'll be able to use the same certificate for those or not.
  
 For now, we're using a self-signed certificate,​ but submitting the CSR to an SSL provider (like [[https://​www.startssl.com|StartSSL]]) would work pretty much the same. For now, we're using a self-signed certificate,​ but submitting the CSR to an SSL provider (like [[https://​www.startssl.com|StartSSL]]) would work pretty much the same.
  
-We're generating the certificate with the Subject Alternative Name extension, which lets us put multiple domain names in a single certificate. As long as we can generate a single certificate (i.e. all the names have the same ownership details) then this works fine, and we can host all the sites with a single IP address. All modern browsers (include ​Internet Explorer 6) support Subject Alternative Name.+We're generating the certificate with the Subject Alternative Name extension, which lets us put multiple domain names in a single certificate. As long as we can generate a single certificate (i.e. all the names have the same ownership details) then this works fine, and we can host all the sites with a single IP address. All modern browsers (and Internet Explorer 6) support Subject Alternative Name.
 ==== Generate CSR ==== ==== Generate CSR ====
  
build/security.txt ยท Last modified: 2012/12/14 17:43 by Admin