Re: lug-bg: Sendmail: TLS bazirani politiki v access_db

[danchev@email.domain.hidden (George Danchev)]

On 20 03 2003 12:08, Vesselin Kolev wrote:
<em class="quotelev1">> Zdraveite,
<em class="quotelev1">>
<em class="quotelev1">>    Napisah pyrvonachalnia variant na documenta za TLS bazirani politiki
<em class="quotelev1">> v access_db. Materialyt se namira na adres:
<em class="quotelev1">>
<em class="quotelev1">> http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/tls-relay.html
<em class="quotelev1">>
<em class="quotelev1">> i e vkliuchen kato glava v rykovodstvoto za Sendmail:
<em class="quotelev1">>
<em class="quotelev1">> http://www.lcpe.uni-sofia.bg/linuxdoc/sendmail/
<em class="quotelev1">>
<em class="quotelev1">> Za da razberete niakoi neshta, shte vi e nuzhno tova pomoshtno
<em class="quotelev1">> chetivo:
<em class="quotelev1">>
<em class="quotelev1">> http://www.lcpe.uni-sofia.bg/linuxdoc/CA/
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>   Pozdravi
<em class="quotelev1">>       Vesselin Kolev
<em class="quotelev1">>
<em class="quotelev1">> PS. Zadava se i rykovodstvo na integrirane na klientskia software kym
<em class="quotelev1">> politikite v access_db (KMain, Netscape/Mozilla Messenger)

Dokato se napishe doc-a za clients, eto kak stana pri men s izvestna pomost ot 
CA-to. 

Legend: 
*ca.cert = X.509 certificate na CA-to , demek Vesselin Kolev ;-) 
*danchev.p12 = PKCS#12 certificate-na na CA-to, my one & my secret key
Demek tova e client certificate-a. 

PKCS se polu4ava ot X.509 4rez openssl --see-help... 

On 19 03 2003 08:47, Vesselin Kolev wrote:

Za KMail: Pyrvo triabva da postavish certificate na moiata CA. Otvariash
 crypto config. menuto na KDE (mozhe napravo ot Konqueror). Otivash na
 "SSL signers" i tam izbirash "Import". Ukazvash pytia do faila ca.cert (tam
 e certificate na CA). S tova toi e importnat.

    danchev.p12 se loadva ot menuto za crypto. configuration na KDE
 (mozhesh da go izvikash ot browsera Konqueror). Shte se otvori edin
 prozorec. Tam ima sekcia "Your Certificates". Natiskash "Import" i ukazvash
 kyde e faila danchev.p12.  Posle kato te popita za parola ne my davash
 nishto, shtoto nie po default go napravihme bez parola. No parola mozhesh
 da si slozhish ot syshtoto menu "Your Certificates", t.e. niama strashno.

   Ako vsichko e nared, kato selectnesh v sekciata "Your Certificates" tvoia
 certificate i izberesh "Verify" ot menuto v diasno, traibva da poluchish
 potvyrzhdenie za tova, che certifikata e validen i trustnat.

   Za Mozilla 1.x/Netscape 6.x/7.x

   Puskash si Mozilla/Netscape. Otivash na
 Edit->Preferences->Privacy&Security Tam vyv pokazanite vyzmozhnosti
 izbirash "Certificates"->"Manage Certificates" i v otvorilia se prozorec
 otivash v sekciata "Your Certificates". Vsyshnost to oshte pri otvarianeto
 na prozoreca za "Manage Certificates" shte popadnesh po porazbirane v "Your
 Certificates". Tam izbirash "Import" i ukazvash pytia do danchev.p12 i sled
 tova go zarezhdash. Imai predvid, che tozi certificate shte zaredi i
 certificate-a za CA. T.e. niama da ti se nalaga da slagash otdelno CA cert
 (to i taka ne stava. za da mozhesh da importnesh CA cert samo, e nuzhno da
 go postavish vyv file s razshirenie .crt i da go otovorish s browsera).

   Posle spirash Mozilla/Netscape i pak go puskash i traibva da e gotovo
 vsichko.  Za da si siguren, che vsichko e nared, otidi pak v Edit->
 Preferences->Privacy&Security->Certificates->Manage Certificates->
 Your Certificates. Tam v otvorilia se prozorec v kolonata "Verified"
 traibva da stoi stoinost "true". Ako tia stoi.. niama problemi-vsichko e
 nared.

<p>V krajna smetka moq KMail se razbira perfect-no s Vesso's Sendmail. 10x. 
Blah.


-- 
pub  4096R/0E4BD0AB 2003-03-18 (no comments) <danchev_at_spnet.net> 
1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB <keyserver.bu.edu>
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================