Re: SSL Self-Signed Certificates

From: Alexey Shklyaev (iu_chief_at_mail.ru)
Date: 01/19/05 

Date: Wed, 19 Jan 2005 22:40:30 +0300

"Stefan Schulz" <terra@spacetime.de> wrote in message
news:pan.2005.01.19.19.28.22.391563@spacetime.de...
> I have a problem with SSL-Sockets. I try to connect to hosts that use SSL
> for encryption only, and therefore do not have a valid certificate chain
> to some root CA. Since i potentially have to deal with a lot of these
> hosts, having the user import them as CA's is impractical to say the
> least. Is there a way to prevent the server verification from happening,
> that SSL just decides that _any_ certificate is good?
>
> --
> In pioneer days they used oxen for heavy pulling, and when one ox
> couldn't budge a log, they didn't try to grow a larger ox. We shouldn't
> be trying for bigger computers, but for more systems of computers.
> --- Rear Admiral Grace Murray Hopper

I had the same problem, but the only way I found was importing the needed
certs into cacerts file. If you find a solution, please let me know

Relevant Pages

  • SSL Self-Signed Certificates
    ... I try to connect to hosts that use SSL ... and therefore do not have a valid certificate chain ... be trying for bigger computers, but for more systems of computers. ...
    (comp.lang.java.help)
  • RE: SSH with no crypt
    ... internal network because they want to be able to sniff network traffic ... ensure nobody inserts malicious hosts on the network that masquerade as ... Subject: SSH with no crypt ... possibility of initializing a SSH2 connection without encryption as ...
    (SSH)
  • Re: [PATCH 07/13] sdhci: Add support for hosts with strict 32 bit addressing
    ... "SDHCI core" to work with 32 bits hosts, ... in the eSDHC part, in the accessors. ... Make sure your server uses encryption ...
    (Linux-Kernel)
  • Re: [patch 5/7] SDHCI: Samsung SDHCI (HSMMC) driver
    ... Hosts shouldn't know more about the card than the ... Make sure your server uses encryption ...
    (Linux-Kernel)
  • Re: [9fans] Sources Gone?
    ... encryption provides, there is a corresponding fear of losing access. ... on two separate occasions, I'm not sure encryption is affordable. ... but two hosts might be more convenient) ... fossil and CPU services are very likely to occur on the same host. ...
    (comp.os.plan9)