The mailing list for listmasters using Sympa

[address@concealed (Janusz S. Bień)]

On Mon, 03 Sep 2007  address@concealed wrote:

> Janusz S. Bien' wrote:

[...]

>> As I use the self-signed certificate, I've converted my certificate
>> from PEM to ca-bundle format with a script found with Google at
>>
>>        http://www.patandkat.com/pat/weblog/archives/computers/
>>
>> Then I appended the result to /usr/share/sympa/ca-bundle.crt (ca parameter
>> in /etc/sympa/sympa.conf) and now my signed messages are accepted
>> without md5 confirmation.
>>
>> So it works, but have I done it in the optimal way?

> Huuum... You probably need to read a lot of documentation about PKI. 

This is definitely true :-)

On the other hand, the author of S/MIME support for Gnus wrote some
time ago

;; I would include pointers to introductory text on concepts used in
;; this library here, but the material I've read are so horrible I
;; don't want to recomend them.
;;
;; Why can't someone write a simple introduction to all this stuff?

I'm afraid he is still right...


> PKI 
> is the way to manage many certificates all around during their lifetime. 
> Selfsigned certificate can help but using them will create a lot 
> problems that PKI try to solve.
>
> This is outside the scoop of Sympa itself but concern cryptology and PKI.

My question was not about using self-signed certificate, but about
configuring sympa. As you didn't formulate any objections, I assume I
have done it at least in an acceptable way.

Best regards

Janusz

-- 
                     ,   
dr hab. Janusz S. Bien, prof. UW -  Uniwersytet Warszawski (Katedra 
Lingwistyki Formalnej)
Prof. Janusz S. Bien - Warsaw University (Department of Formal Linguistics)
address@concealed, address@concealed, http://www.klf.uw.edu.pl/jsbien/