Hi, I've decided to become my own CA. The trouble is, I've to add the CA certificate to each account (be it windows or linux account).

For example, for Linux KDE, I've got to open the kcontrol and go to crypto and import the appropriate CA's cert. Similarly, for Windows, I need to open IE's Internet Settings and import.

Is there anyway I can automatically do this? Through script or by less manual work (maybe put it in my http server and when I go to the site, the certificate can be added?)

Another thing is, when someone pretend to be one of my server, can another user be redirected to his machine? Let's assume that:

1) Hacker become his own CA. Loaded his cert into some Win9x (I believe the preferences doesn't change when a user logout).

2) Hacker has changed the DNS entry of the machine to point to his own machine.


Thank you.

Soz, dunno how to automate it.

For an example of an SSL "Man in the Middle" type attack look at this Phrack piece.

Also note Mockerysoft's IE 5 has been patched at least twice for not doing cert validation the way it sposed to do...