Red Hat NETWORK PROXY SERVER 3.7 - Manuel d'utilisateur télécharger pdf (Page 63)

3.4 Creating Your Key and Certiﬁcate Request 53

Since the Red HatSecureWeb Serveris restrictedfor sale to only the US or

Canada, your input will be either US or CA. The default input, in brackets,

is US. To accept the default input, just press Enter .

You will have to type in the rest of the inputs (State or Province

Name, Locality (City) Name, Company (Organization) Name,

Department Name,Server Host Name,andAdministrators E-mail

address). All of these should be self-explanatory. Do not abbreviate the

city or state. Write them out (for example, St. Louis should be written out

as Saint Louis). For Server Host Name, make sure you type in the real

name of your secure web server (a valid DNS name), and not any aliases

which the server may have.

Youdon’tneedtouseeitherofthe extraattributes(A challenge password

andAn optional company name). Justpress Enter toaccepttheblank

default for both inputs.

Whenyou’veﬁnishedinputtingyourinformation, aﬁlenamedhttpsd.csr

will be created. httpsd.csr is your certiﬁcate request, ready to send to

your CA.

Next, you need to test your secure web server to make sure everything

is working properly. To do that, you need to either send the certiﬁcate

request off to a CA in order to get a test certiﬁcate, or to create a test cer-

tiﬁcate yourself.

Note that a test certiﬁcate lets you test your secure web server to see if it

works, but it is not the same thing as a signed certiﬁcate. A test certiﬁcate

can be used for a short period of time and you don’t have to pay for it.

However, it is illegal to use a test certiﬁcate as if it were a real certiﬁcate

(i.e., to engage in Internet commerce with it) and it won’t work. A test

certiﬁcate will not be accepted by browsers which would normally accept

that CA’s certiﬁcates without asking the user. Test certiﬁcates will only

work withbrowsers whichhave beenequipped with a root certiﬁcate pro-

vided with the test certiﬁcate. You will have to insert the root certiﬁcate

into a browser or browsers in order to test your secure web server with

those particular browsers.

You areonly allowed to use thetest certiﬁcatefor testing or demonstration

purposes. You’re not allowed to use the test certiﬁcate for secure com-

merce over the web.

1 2 ... 58 59 60 61 62 63 64 65 66 67 68 ... 100 101

Pas de commentaire

Red Hat NETWORK PROXY SERVER 3.7 - Manuel d'utilisateur Page 63