Re: [apache-ssl] GB?
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [apache-ssl] GB?



John Sutton wrote:
> 
> Hi again
> 
> Another couple of minor questions:
> 
> 1) In ssleay.cnf in Ben's distribution, he sets the default country code to GB:
> 
> countryName_default             = GB
> 
> Is this merely a Republican sentiment, or is there a another good reason
> (not that Republicanism isn't a good one ;-) why this is to be preferred to
> the more usual "UK"?

I believe that GB is the correct ISO format, and UK is an Internet
oddity. Of course, until very recently, being 'usual' on the Internet,
meant that 4,236 academics and a couple of hackers preferred that
terminology... :)

> 
> 2) What is this strange business of generating a odd named soft link to a
> key file:
> 
> dd948bac.0 -> ../SSLconf/conf/httpsd.pem
> 
> Is this necessary? desirable? why?

Necessary? No.

Desirable? Depends. 

The soft link allows the server to find the relevant CA cert, quickly.
This is only an issue if you have a lot of certs. The bottom line is
your server will function OK without it.

> 
> Thanks for all the help this far, and once again, TIA
> 
> John Sutton
> 
> PS Are Thawte usually so slow in doing business!  It's been quite a few days
> since I applied to become a Hosting Partner (might as well have the 25 bucks
> per cert) but this far zilch.  Not even an acknowledgement...

All the Hosting Partner program does is to lodge records of your
technical contact details etc. in a database, so you (or your clients)
don't need to re-enter them when you order a cert. In my experience,
applying will not generate any response from Thawte.

cheers,
Adam
--
Adam Laurie                   Tel: +44 (181) 742 0755
A.L. Digital Ltd.             Fax: +44 (181) 742 5995
Voysey House                  
Barley Mow Passage            http://www.aldigital.co.uk
London W4 4GB                 mailto:adam@algroup.co.uk
UNITED KINGDOM                PGP key on keyservers