update, gpg changes etc
root
20 years ago
parent
6f7b3ab1b7
commit
06ba89b6d2
File diff suppressed because it is too large
Load Diff
File diff suppressed because it is too large
Load Diff
@ -1 +1,15 @@
|
||||
<? /*
|
||||
Copyright (C) 2004 by Duane Groth <duane_at_CAcert_dot_org>
|
||||
|
||||
This file is part of CAcert.
|
||||
|
||||
CAcert has been released under the CAcert Source License
|
||||
which can be found included with these source files or can
|
||||
be downloaded from the internet from the following address:
|
||||
http://www.cacert.org/src-lic.php
|
||||
|
||||
CAcert is distributed WITHOUT ANY WARRANTY; without even
|
||||
the implied warranty of MERCHANTABILITY or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. See the License for more details.
|
||||
*/ ?>
|
||||
<?=_("To be completed")?>
|
||||
|
||||
@ -1,3 +1,17 @@
|
||||
<? /*
|
||||
Copyright (C) 2004 by Duane Groth <duane_at_CAcert_dot_org>
|
||||
|
||||
This file is part of CAcert.
|
||||
|
||||
CAcert has been released under the CAcert Source License
|
||||
which can be found included with these source files or can
|
||||
be downloaded from the internet from the following address:
|
||||
http://www.cacert.org/src-lic.php
|
||||
|
||||
CAcert is distributed WITHOUT ANY WARRANTY; without even
|
||||
the implied warranty of MERCHANTABILITY or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. See the License for more details.
|
||||
*/ ?>
|
||||
<p><i><?=_("Question: I'm a software developer for linux and I want to use CAcert/openssl to distribute my packages with detached signatures, is this possible and why would I do this over PGP/GPG detached signatures?")?></i></p>
|
||||
<p><?=_("I'll anwser the why part first, as that's reasonably easy. The short answer is it takes most of the key handling responsibilty away from you and/or your group. If you need to revoke your key for any reason (such as a developer leaving the project) it won't effect your ability to revoke the existing key or keys, and issue new ones.")?></p>
|
||||
|
||||
|
||||
@ -0,0 +1,63 @@
|
||||
<? /*
|
||||
Copyright (C) 2004 by Duane Groth <duane_at_CAcert_dot_org>
|
||||
|
||||
This file is part of CAcert.
|
||||
|
||||
CAcert has been released under the CAcert Source License
|
||||
which can be found included with these source files or can
|
||||
be downloaded from the internet from the following address:
|
||||
http://www.cacert.org/src-lic.php
|
||||
|
||||
CAcert is distributed WITHOUT ANY WARRANTY; without even
|
||||
the implied warranty of MERCHANTABILITY or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. See the License for more details.
|
||||
*/ ?>
|
||||
<?
|
||||
function dotab($num)
|
||||
{
|
||||
for($i = 0; $i < $num; $i++)
|
||||
{
|
||||
for($j = 0; $j < 8; $j++)
|
||||
$string .= " ";
|
||||
}
|
||||
return($string);
|
||||
}
|
||||
?>
|
||||
<h3><?=_("How can I do a single sign on similar to CAcert using client certificates?")?></h3>
|
||||
|
||||
<p><?=_("Firstly you need mod-ssl and apache setup (this is beyond the scope of this FAQ item and you will need to search on google etc for LAMP setup information). I recommend mod-ssl over apache-ssl because it means you need less resources to achieve the same result.")?></p>
|
||||
|
||||
<p><?=_("Once you have everything setup and working you will need to add lines similar to below to your apache.conf")?></p>
|
||||
|
||||
<p style="border:dotted 1px #900;padding:0.3em;background-color:#ffe;"><br>
|
||||
<VirtualHost 127.0.0.1:443><br>
|
||||
SSLEngine on<br>
|
||||
SSLVerifyClient require<br>
|
||||
SSLVerifyDepth 2<br>
|
||||
SSLCACertificateFile /etc/ssl/cacert.crt<br>
|
||||
SSLCertificateFile /etc/ssl/certs/cacert.crt<br>
|
||||
SSLCertificateKeyFile /etc/ssl/private/cacert.pem<br>
|
||||
SSLOptions +StdEnvVars<br>
|
||||
<br>
|
||||
ServerName secure.cacert.org<br>
|
||||
DocumentRoot /www<br>
|
||||
</VirtualHost><br><br>
|
||||
</p>
|
||||
|
||||
<p><?=_("Please note, you will need to alter the paths, hostname and IP of the above example, which is just that an example! The SSLCACertificateFile directive is supposed to point to a file with the root certificate you wish to verify your client certificates against, for the CAcert website we obviously only accept certificates issued by our own website and use our root certificate to initially verify this.")?></p>
|
||||
|
||||
<p><?=_("Once you have everything working and you've tested sending a client certificate to your site and you're happy all is well you can start adding code to PHP (or any other language you like that can pull server environment information). At present I only have PHP code available and the example is in PHP")?></p>
|
||||
|
||||
<p style="border:dotted 1px #900;padding:0.3em;background-color:#ffe;"><br>
|
||||
<?=dotab(1)?>if($_SERVER['HTTP_HOST'] == "secure.cacert.org")<br>
|
||||
<?=dotab(1)?>{<br>
|
||||
<?=dotab(2)?>$query = "select * from `users` where `email`='$_SERVER[SSL_CLIENT_S_DN_Email]'";<br>
|
||||
<?=dotab(2)?>$res = mysql_query($query);<br>
|
||||
<?=dotab(2)?>if(mysql_num_rows($res) > 0)<br>
|
||||
<?=dotab(2)?>{<br>
|
||||
<?=dotab(3)?>$_SESSION['profile']['loggedin'] = 1;<br>
|
||||
<?=dotab(3)?>header("location: https://secure.cacert.org/account.php");<br>
|
||||
<?=dotab(3)?>exit;<br>
|
||||
<?=dotab(2)?>}<br>
|
||||
<?=dotab(1)?>}<br><br>
|
||||
</p>
|
||||
@ -0,0 +1,160 @@
|
||||
<html>
|
||||
<head>
|
||||
<title>Install CACert Root using CEnroll Active-X component and PKCS-7</title>
|
||||
<link rel="stylesheet" href="styles/default.css" type="text/css">
|
||||
<link href="http://my.rsscache.com/www.cacert.org/rss.php" rel="alternate" type="application/rss+xml" title="rss">
|
||||
</head>
|
||||
|
||||
<SCRIPT LANGUAGE="VBSCRIPT">
|
||||
|
||||
Sub InstallCert
|
||||
|
||||
credentials = "MIIHPTCCBSWgAwIBAgIBADANBgkqhkiG9w0BAQQFADB5MRAwDgYDVQQKEwdSb290" & _
|
||||
"IENBMR4wHAYDVQQLExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNB" & _
|
||||
"IENlcnQgU2lnbmluZyBBdXRob3JpdHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRA" & _
|
||||
"Y2FjZXJ0Lm9yZzAeFw0wMzAzMzAxMjI5NDlaFw0zMzAzMjkxMjI5NDlaMHkxEDAO" & _
|
||||
"BgNVBAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEi" & _
|
||||
"MCAGA1UEAxMZQ0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJ" & _
|
||||
"ARYSc3VwcG9ydEBjYWNlcnQub3JnMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIIC" & _
|
||||
"CgKCAgEAziLA4kZ97DYoB1CW8qAzQIxL8TtmPzHlawI229Z89vGIj053NgVBlfkJ" & _
|
||||
"8BLPRoZzYLdufujAWGSuzbCtRRcMY/pnCujW0r8+55jE8Ez64AO7NV1sId6eINm6" & _
|
||||
"zWYyN3L69wj1x81YyY7nDl7qPv4coRQKFWyGhFtkZip6qUtTefWIonvuLwphK42y" & _
|
||||
"fk1WpRPs6tqSnqxEQR5YYGUFZvjARL3LlPdCfgv3ZWiYUQXw8wWRBB0bF4LsyFe7" & _
|
||||
"w2t6iPGwcswlWyCR7BYCEo8y6RcYSNDHBS4CMEK4JZwFaz+qOqfrU0j36NK2B5jc" & _
|
||||
"G8Y0f3/JHIJ6BVgrCFvzOKKrF11myZjXnhCLotLddJr3cQxyYN/Nb5gznZY0dj4k" & _
|
||||
"epKwDpUeb+agRThHqtdB7Uq3EvbXG4OKDy7YCbZZ16oE/9KTfWgu3YtLq1i6L43q" & _
|
||||
"laegw1SJpfvbi1EinbLDvhG+LJGGi5Z4rSDTii8aP8bQUWWHIbEZAWV/RRyH9XzQ" & _
|
||||
"QUxPKZgh/TMfdQwEUfoZd9vUFBzugcMd9Zi3aQaRIt0AUMyBMawSB3s42mhb5ivU" & _
|
||||
"fslfrejrckzzAeVLIL+aplfKkQABi6F1ITe1Yw1nPkZPcCBnzsXWWdsC4PDSy826" & _
|
||||
"YreQQejdIOQpvGQpQsgi3Hia/0PsmBsJUUtaWsJx8cTLc6nloQsCAwEAAaOCAc4w" & _
|
||||
"ggHKMB0GA1UdDgQWBBQWtTIb1Mfz4OaO873SsDrusjkY0TCBowYDVR0jBIGbMIGY" & _
|
||||
"gBQWtTIb1Mfz4OaO873SsDrusjkY0aF9pHsweTEQMA4GA1UEChMHUm9vdCBDQTEe" & _
|
||||
"MBwGA1UECxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0" & _
|
||||
"IFNpZ25pbmcgQXV0aG9yaXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2Vy" & _
|
||||
"dC5vcmeCAQAwDwYDVR0TAQH/BAUwAwEB/zAyBgNVHR8EKzApMCegJaAjhiFodHRw" & _
|
||||
"czovL3d3dy5jYWNlcnQub3JnL3Jldm9rZS5jcmwwMAYJYIZIAYb4QgEEBCMWIWh0" & _
|
||||
"dHBzOi8vd3d3LmNhY2VydC5vcmcvcmV2b2tlLmNybDA0BglghkgBhvhCAQgEJxYl" & _
|
||||
"aHR0cDovL3d3dy5jYWNlcnQub3JnL2luZGV4LnBocD9pZD0xMDBWBglghkgBhvhC" & _
|
||||
"AQ0ESRZHVG8gZ2V0IHlvdXIgb3duIGNlcnRpZmljYXRlIGZvciBGUkVFIGhlYWQg" & _
|
||||
"b3ZlciB0byBodHRwOi8vd3d3LmNhY2VydC5vcmcwDQYJKoZIhvcNAQEEBQADggIB" & _
|
||||
"ACjH7pyCArpcgBLKNQodgW+JapnM8mgPf6fhjViVPr3yBsOQWqy1YPaZQwGjiHCc" & _
|
||||
"nWKdpIevZ1gNMDY75q1I08t0AoZxPuIrA2jxNGJARjtT6ij0rPtmlVOKTV39O9lg" & _
|
||||
"18p5aTuxZZKmxoGCXJzN600BiqXfEVWqFcofN8CCmHBh22p8lqOOLlQ+TyGpkO/c" & _
|
||||
"gr/c6EWtTZBzCDyUZbAEmXZ/4rzCahWqlwQ3JNgelE5tDlG+1sSPypZt90Pf6DBl" & _
|
||||
"Jzt7u0NDY8RD97LsaMzhGY4i+5jhe1o+ATc7iwiwovOVThrLm82asduycPAtStvY" & _
|
||||
"sONvRUgzEv/+PDIqVPfE94rwiCPCR/5kenHA0R6mY7AHfqQv0wGP3J8rtsYIqQ+T" & _
|
||||
"SCX8Ev2fQtzzxD72V7DX3WnRBnc0CkvSyqD/HMaMyRa+xMwyN2hzXwj7UfdJUzYF" & _
|
||||
"CpUCTPJ5GhD22Dp1nPMd8aINcGeGG7MW9S/lpOt5hvk9C8JzC6WZrG/8Z7jlLwum" & _
|
||||
"GCSNe9FINSkYQKyTYOGWhlC0elnYjyELn8+CkcY7v2vcB5G5l1YjqrZslMZIBjzk" & _
|
||||
"zk6q5PYvCdxTby78dOs6Y5nCpqyJvKeyRKANihDjbPIky/qbn3BHLt4Ui9SyIAmW" & _
|
||||
"omTxJBzcoTWcFbLUvFUufQb1nA5V9FrWk9p2rSVzTMVD"
|
||||
|
||||
On Error Resume Next
|
||||
Dim Enroll
|
||||
|
||||
Set Enroll = CreateObject("CEnroll.CEnroll.2")
|
||||
if ( (Err.Number = 438) OR (Err.Number = 429) ) Then
|
||||
Err.Clear
|
||||
Set Enroll = CreateObject("CEnroll.CEnroll.1")
|
||||
End If
|
||||
if Err.Number <> 0 then
|
||||
location = "index.php?id=18&message=Can't%20instantiate%20the%20CEnroll%20control:%20" & Hex(err)
|
||||
Else
|
||||
Call Enroll.InstallPKCS7(credentials)
|
||||
If err.Number <> 0 then
|
||||
location = "index.php?id=18&message=Problems%20were%20detected%20with%20the%20CACert%20root%20certificate%20download%20error:%20" & Hex(err)
|
||||
Else
|
||||
location = "index.php?id=18&message=The%20CACert%20root%20certificate%20was%20successfully%20installed"
|
||||
End if
|
||||
End If
|
||||
|
||||
End sub
|
||||
</SCRIPT>
|
||||
<body LANGUAGE="VBScript" ONLOAD="InstallCert">
|
||||
<div id="pagecell1">
|
||||
<div id="pageName"><br>
|
||||
<h2><a href="http://www.cacert.org"><img src="/images/cacert2.png" border="0" alt="CAcert.org logo"></a></h2>
|
||||
<div id="googlead"><script type="text/javascript">
|
||||
<!--
|
||||
google_ad_client = "pub-0959373285729680";
|
||||
google_alternate_ad_url = "http://text.happysnapper.net/?userid=06f45be90b9c7456f98f304d0cae3405&border=FFFFFF&bg=FFFFFF&nourl=www.cacert.org";
|
||||
google_ad_width = 468;
|
||||
google_ad_height = 60;
|
||||
google_ad_format = "468x60_as";
|
||||
google_color_link = "000000";
|
||||
google_color_url = "000000";
|
||||
google_color_text = "000000";
|
||||
google_color_border = "FFFFFF";
|
||||
//-->
|
||||
</script>
|
||||
|
||||
<script type="text/javascript" src="http://pagead2.googlesyndication.com/pagead/show_ads.js"></script></div>
|
||||
</div>
|
||||
<div id="pageNav">
|
||||
<div class="relatedLinks">
|
||||
<h3>Join CAcert.org</h3>
|
||||
<a href="https://www.cacert.org/index.php?id=1">Join</a>
|
||||
</div>
|
||||
<div class="relatedLinks">
|
||||
|
||||
<h3>My Account</h3>
|
||||
<a href="https://www.cacert.org/index.php?id=4">Normal Login</a>
|
||||
<a href="https://secure.cacert.org/index.php?id=4">Cert Login</a>
|
||||
<a href="https://www.cacert.org/index.php?id=5">Lost Password</a>
|
||||
</div>
|
||||
<div class="relatedLinks">
|
||||
<h3>Miscellaneous</h3>
|
||||
|
||||
<a href="news.php">CAcert News</a>
|
||||
<a href="help.php">Howto Information</a>
|
||||
<a href="logos.php">CAcert Logos</a>
|
||||
<a href="stats.php">CAcert Statistics</a>
|
||||
<a href="index.php?id=3">Root Certificate</a>
|
||||
<a href="revoke.crl">CRL</a>
|
||||
<a href="http://my.rsscache.com/www.cacert.org/rss.php">RSS News Feed</a>
|
||||
|
||||
<a href="index.php?id=7">Credits</a>
|
||||
<a href="index.php?id=8">CAcert Board</a>
|
||||
</div>
|
||||
<div class="relatedLinks">
|
||||
<h3>Translations</h3>
|
||||
<a href="index.php?id=0&lang=da_DK">Dansk</a>
|
||||
<a href="index.php?id=0&lang=de_DE">Deutsch</a>
|
||||
|
||||
<a href="index.php?id=0&lang=en_AU">English</a>
|
||||
<a href="index.php?id=0&lang=es_ES">Español</a>
|
||||
<a href="index.php?id=0&lang=fr_FR">Français</a>
|
||||
<a href="index.php?id=0&lang=it_IT">Italiano</a>
|
||||
<a href="index.php?id=0&lang=hu_HU">Magyar</a>
|
||||
|
||||
<a href="index.php?id=0&lang=nl_NL">Nederlands</a>
|
||||
<a href="index.php?id=0&lang=pt_PT">Português</a>
|
||||
<a href="index.php?id=0&lang=pt_BR">Português Brasileiro</a>
|
||||
<a href="index.php?id=0&lang=ru_RU">Русский</a>
|
||||
<a href="index.php?id=0&lang=sv_SE">Svenska</a>
|
||||
<a href="index.php?id=0&lang=tr_TR">Türkçe</a>
|
||||
|
||||
<a href="index.php?id=0&lang=zh_CN">中文(简体)</a>
|
||||
</div>
|
||||
</div>
|
||||
<div id="content">
|
||||
<div class="story">
|
||||
<p><?=_("Install a Root Certificate using Internet Explorer and the CEnroll ActiveX control. This avoids the Microsoft Certificate Installation wizard and all of its complexity and extra screens for users. This however will ONLY work for Microsoft Internet Explorer.")?></p>
|
||||
</div>
|
||||
</div>
|
||||
<div id="siteInfo">
|
||||
<!--ONESTAT SCRIPTCODE START-->
|
||||
<script type="text/javascript" src="onestat.js"></script>
|
||||
<noscript>
|
||||
<a href="http://www.onestat.com/asp/login.asp?sid=164863">
|
||||
<img src="http://stat.onestat.com/asp/stat.asp?tagver=1&sid=164863&js=no&" alt="this site tracked by onestat.com" />
|
||||
</a>
|
||||
</noscript>
|
||||
<!--ONESTAT SCRIPTCODE END--> <a href="index.php?id=12">About Us</a> | <a href="index.php?id=13">Donations</a> |
|
||||
<a href="index.php?id=10">Privacy Policy</a> |
|
||||
<a href="index.php?id=51">Mission Statement</a> | <a href="index.php?id=11">Contact Us</a> |
|
||||
©2004 by CAcert</div>
|
||||
|
||||
</div>
|
||||
</BODY>
|
||||
</HTML>
|
||||
@ -0,0 +1,17 @@
|
||||
<? /*
|
||||
Copyright (C) 2004 by Duane Groth <duane_at_CAcert_dot_org>
|
||||
|
||||
This file is part of CAcert.
|
||||
|
||||
CAcert has been released under the CAcert Source License
|
||||
which can be found included with these source files or can
|
||||
be downloaded from the internet from the following address:
|
||||
http://www.cacert.org/src-lic.php
|
||||
|
||||
CAcert is distributed WITHOUT ANY WARRANTY; without even
|
||||
the implied warranty of MERCHANTABILITY or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. See the License for more details.
|
||||
*/ ?>
|
||||
<p>
|
||||
<?=$_GET['message']?>
|
||||
</p>
|
||||
@ -0,0 +1,32 @@
|
||||
<? /*
|
||||
Copyright (C) 2004 by Duane Groth <duane_at_CAcert_dot_org>
|
||||
|
||||
This file is part of CAcert.
|
||||
|
||||
CAcert has been released under the CAcert Source License
|
||||
which can be found included with these source files or can
|
||||
be downloaded from the internet from the following address:
|
||||
http://www.cacert.org/src-lic.php
|
||||
|
||||
CAcert is distributed WITHOUT ANY WARRANTY; without even
|
||||
the implied warranty of MERCHANTABILITY or FITNESS FOR A
|
||||
PARTICULAR PURPOSE. See the License for more details.
|
||||
*/ ?>
|
||||
<?
|
||||
loadem("index");
|
||||
|
||||
showheader(_("Welcome to CAcert.org"));
|
||||
|
||||
if($_POST['csr'] == "")
|
||||
{ ?>
|
||||
<form method="post" action="<?=$PHP_SELF?>">
|
||||
<p>Please paste the PEM encoded certificate signing request you would like to analyze in the text area below:</p>
|
||||
<p><textarea name="csr" cols="64" rows="12"></textarea></p>
|
||||
<p><input type="submit" name="process" value="<?=_("Analyse")?>"></p>
|
||||
</form>
|
||||
<? } else {
|
||||
echo $_POST['csr'];
|
||||
print_r(openssl_x509_parse(openssl_x509_read($_POST['csr'])));
|
||||
}
|
||||
showfooter();
|
||||
?>
|
||||
File diff suppressed because it is too large
Load Diff
Binary file not shown.
Binary file not shown.
@ -0,0 +1,26 @@
|
||||
<? /* <author>$row['who'] <nomail@nospam.sss></author> */ ?>
|
||||
<? header("Content-Type: application/xml");
|
||||
?><<?="?"?>xml version="1.0" encoding="UTF-8" <?="?"?>>
|
||||
<rss version="2.0">
|
||||
<channel>
|
||||
<title>CAcert.org NEWS!</title>
|
||||
<link>http://www.CAcert.org</link>
|
||||
<copyright>Copyright © 2002-present, CAcert Inc.</copyright>
|
||||
<description>News feed for CAcert.org</description>
|
||||
<pubDate><?=date("D, d M Y H:i:s O")?></pubDate>
|
||||
<lastBuildDate><?=date("D, d M Y H:i:s O")?></lastBuildDate>
|
||||
<ttl>3600</ttl><?
|
||||
$query = "select *, UNIX_TIMESTAMP(`when`) as `TS` from news order by `when` desc limit 10";
|
||||
$res = mysql_query($query);
|
||||
while($row = mysql_fetch_assoc($res))
|
||||
{ ?>
|
||||
<item>
|
||||
<title><?=strip_tags($row['short'])?></title>
|
||||
<description><?=strip_tags($row['story'])?></description>
|
||||
<link>http://www.cacert.org/news.php?from=rss&id=<?=$row['id']?></link>
|
||||
<pubDate><?=date("D, d M Y H:i:s O", $row['TS'])?></pubDate>
|
||||
</item>
|
||||
<? } ?>
|
||||
|
||||
</channel>
|
||||
</rss>
|
||||
Loading…
Reference in New Issue