LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 08-15-2011, 12:12 AM   #1
ust
Senior Member
 
Registered: Mar 2003
Location: fasdf
Distribution: Debian / Suse /RHEL
Posts: 1,130

Rep: Reputation: 30
Self create openssl


I know we can create openssl certicate by myself rather than buy it from vendor , can advise what is the difference between these two methods ? the cert. that created by vendor is more security ?

Thanks.
 
Old 08-15-2011, 12:26 AM   #2
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 677Reputation: 677Reputation: 677Reputation: 677Reputation: 677Reputation: 677
A self generated cert won't cost you $5000. However browsers will notify users that the cert is self signed if it wasn't issued by a CA.

Since it is self-signed, you aren't providing reliable authorization and non-repudiation to the end user since they don't know if you really are who you claim. The connection will be secure, but the end user doesn't know if the connection is to who the believe it is.
 
Old 08-15-2011, 01:49 AM   #3
ust
Senior Member
 
Registered: Mar 2003
Location: fasdf
Distribution: Debian / Suse /RHEL
Posts: 1,130

Original Poster
Rep: Reputation: 30
Quote:
Originally Posted by jschiwal View Post
A self generated cert won't cost you $5000. However browsers will notify users that the cert is self signed if it wasn't issued by a CA.

Since it is self-signed, you aren't providing reliable authorization and non-repudiation to the end user since they don't know if you really are who you claim. The connection will be secure, but the end user doesn't know if the connection is to who the believe it is.
Thx reply ,

I didn't have this experience , the $5,000 is for what cost ?

Thanks
 
Old 08-29-2011, 12:17 AM   #4
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 677Reputation: 677Reputation: 677Reputation: 677Reputation: 677Reputation: 677
It is the cost for a cert renewal by the a company quoted by Steve Gibson for his grc.com site. Some other companies are not as expensive.
 
Old 08-29-2011, 08:18 PM   #5
jefro
Moderator
 
Registered: Mar 2008
Posts: 17,170

Rep: Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562Reputation: 2562
There are many uses and secure uses for a self signed certificate.

The normal use would be to physically send the certificate to the remote user.
A second instance is where you install it to the authorized computers.

You could fool with authentication but why if it is just for your security and not public. That really is the reason for a public certificate. That being anyone can have access to it.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
OpenSSL rozilla Linux - Software 3 12-30-2008 11:38 AM
Ask openssl | create self sign cert for not prompting password | WorldIsNotFair Linux - Server 2 10-19-2008 11:55 PM
oops openssl-0.9.8e over openssl-0.9.8d bad install now 2 copies? rcorkum Slackware 4 06-29-2007 02:58 AM
openssl easy_coder Linux - Software 1 09-08-2006 10:08 PM
How to create OpenSSL certificate for use in IIS 6.0 Pastorino Linux - Security 3 09-23-2005 08:50 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 01:29 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration