Return-Path: X-Original-To: apmail-httpd-docs-archive@www.apache.org Delivered-To: apmail-httpd-docs-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 795AD7EA3 for ; Wed, 12 Oct 2011 08:30:30 +0000 (UTC) Received: (qmail 82218 invoked by uid 500); 12 Oct 2011 08:30:29 -0000 Delivered-To: apmail-httpd-docs-archive@httpd.apache.org Received: (qmail 82147 invoked by uid 500); 12 Oct 2011 08:30:29 -0000 Mailing-List: contact docs-help@httpd.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: Reply-To: docs@httpd.apache.org List-Id: Delivered-To: mailing list docs@httpd.apache.org Received: (qmail 82131 invoked by uid 99); 12 Oct 2011 08:30:28 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Oct 2011 08:30:28 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=5.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: local policy) Received: from [80.74.153.203] (HELO pizol.sourcepole.ch) (80.74.153.203) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 12 Oct 2011 08:30:20 +0000 Received: from admin.sp-metanet ([192.168.138.47]) by mail.sp-metanet with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32) (Exim 4.72) (envelope-from ) id 1RDuCF-0007JP-2k for docs@httpd.apache.org; Wed, 12 Oct 2011 10:29:58 +0200 Received: from www-data by admin.sp-metanet with local (Exim 4.72) (envelope-from ) id 1RDuCE-0007JM-LA for docs@httpd.apache.org; Wed, 12 Oct 2011 10:29:50 +0200 To: docs@httpd.apache.org Subject: [PATCH] intermediate certs FAQ X-PHP-Originating-Script: 0:compose2.php Received: from 192.168.138.20 (auth. user tpo2@mail) by www.sourcepole.ch with HTTP; Wed, 12 Oct 2011 08:29:50 +0000 Date: Wed, 12 Oct 2011 08:29:50 +0000 X-Mailer: IlohaMail/0.8.14 (On: www.sourcepole.ch) Message-ID: From: "Tomas Pospisek Mailing Lists" Bounce-To: "Tomas Pospisek Mailing Lists" Errors-To: "Tomas Pospisek Mailing Lists" MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="RWP_PART_tpo21318408190" X-SA-Score: -2.9 X-Virus-Checked: Checked by ClamAV on apache.org --RWP_PART_tpo21318408190 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hello, the FAQ "Why do browsers complain that they cannot verify my Verisign Global ID server certificate?" [1] shouldn't be Verisign specific, since at least Thawte is also using intermediate certs. I've tried to generalize the FAQ entry. See the attached patch to the svn apache-docs. I'd be nice if the patch could be applied. Thanks, *t [1] http://httpd.apache.org/docs/trunk/ssl/ssl_faq.html#gid --RWP_PART_tpo21318408190 Content-Type: text/x-patch; name="intermediate-ca.patch" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="intermediate-ca.patch" SW5kZXg6IG1hbnVhbC9zc2wvc3NsX2ZhcS5odG1sLmVuCj09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0tIG1hbnVhbC9z c2wvc3NsX2ZhcS5odG1sLmVuCShSZXZpc2lvbiAxMTgyMjQ2KQorKysgbWFudWFsL3NzbC9zc2xf ZmFxLmh0bWwuZW4JKEFyYmVpdHNrb3BpZSkKQEAgLTIwNyw3ICsyMDcsNyBAQAogPGxpPjxhIGhy ZWY9IiNwZW1kZXIiPkhvdyBjYW4gSSBjb252ZXJ0IGEgY2VydGlmaWNhdGUgZnJvbSBQRU0gdG8g REVSCiBmb3JtYXQ/PC9hPjwvbGk+CiA8bGk+PGEgaHJlZj0iI2dpZCI+V2h5IGRvIGJyb3dzZXJz IGNvbXBsYWluIHRoYXQgdGhleSBjYW5ub3QKLXZlcmlmeSBteSBWZXJpc2lnbiBHbG9iYWwgSUQg c2VydmVyIGNlcnRpZmljYXRlPzwvYT48L2xpPgordmVyaWZ5IG15IHNlcnZlciBjZXJ0aWZpY2F0 ZT88L2E+PC9saT4KIDwvdWw+CiAKIDxoMz48YSBuYW1lPSJrZXlzY2VydHMiIGlkPSJrZXlzY2Vy dHMiPldoYXQgYXJlIFJTQSBQcml2YXRlIEtleXMsIENTUnMgYW5kIENlcnRpZmljYXRlcz88L2E+ PC9oMz4KQEAgLTQ3NiwxNSArNDc2LDIzIEBACiAKIAogPGgzPjxhIG5hbWU9ImdpZCIgaWQ9Imdp ZCI+V2h5IGRvIGJyb3dzZXJzIGNvbXBsYWluIHRoYXQgdGhleSBjYW5ub3QKLXZlcmlmeSBteSBW ZXJpc2lnbiBHbG9iYWwgSUQgc2VydmVyIGNlcnRpZmljYXRlPzwvYT48L2gzPgotPHA+VmVyaXNp Z24gdXNlcyBhbiBpbnRlcm1lZGlhdGUgQ0EgY2VydGlmaWNhdGUgYmV0d2VlbiB0aGUgcm9vdCBD QQotICAgIGNlcnRpZmljYXRlICh3aGljaCBpcyBpbnN0YWxsZWQgaW4gdGhlIGJyb3dzZXJzKSBh bmQgdGhlIHNlcnZlcgotICAgIGNlcnRpZmljYXRlICh3aGljaCB5b3UgaW5zdGFsbGVkIG9uIHRo ZSBzZXJ2ZXIpLiBZb3Ugc2hvdWxkIGhhdmUKLSAgICByZWNlaXZlZCB0aGlzIGFkZGl0aW9uYWwg Q0EgY2VydGlmaWNhdGUgZnJvbSBWZXJpc2lnbi4KLSAgICBJZiBub3QsIGNvbXBsYWluIHRvIHRo ZW0uIFRoZW4sIGNvbmZpZ3VyZSB0aGlzIGNlcnRpZmljYXRlIHdpdGggdGhlCit2ZXJpZnkgbXkg c2VydmVyIGNlcnRpZmljYXRlPzwvYT48L2gzPgorPHA+T25lIHJlYXNvbiB0aGlzIG1pZ2h0IGhh cHBlbiBpcyBiZWNhdXNlIHlvdXIgc2VydmVyIGNlcnRpZmljYXRlIGlzIHNpZ25lZAorICAgIGJ5 IGFuIGludGVybWVkaWF0ZSBDQS4gVmFyaW91cyBDQXMsIHN1Y2ggYXMgVmVyaXNpZ24gb3IgVGhh d3RlLCBoYXZlIHN0YXJ0ZWQKKyAgICBzaWduaW5nIGNlcnRpZmljYXRlcyBub3Qgd2l0aCB0aGVp ciByb290IGNlcnRpZmljYXRlIGJ1dCB3aXRoIGludGVybWVkaWF0ZQorICAgIGNlcnRpZmljYXRl cy48L3A+CisKKzxwPkludGVybWVkaWF0ZSBDQSBjZXJ0aWZpY2F0ZXMgbGllIGJldHdlZW4gdGhl IHJvb3QgQ0EgY2VydGlmaWNhdGUgKHdoaWNoIGlzCisgICAgaW5zdGFsbGVkIGluIHRoZSBicm93 c2VycykgYW5kIHRoZSBzZXJ2ZXIgY2VydGlmaWNhdGUgKHdoaWNoIHlvdSBpbnN0YWxsZWQKKyAg ICBvbiB0aGUgc2VydmVyKS4gSW4gb3JkZXIgZm9yIHRoZSBicm93c2VyIHRvIGJlIGFibGUgdG8g dHJhdmVyc2UgYW5kIHZlcmlmeQorICAgIHRoZSB0cnVzdCBjaGFpbiBmcm9tIHRoZSBzZXJ2ZXIg Y2VydGlmaWNhdGUgdG8gdGhlIHJvb3QgY2VydGlmaWNhdGUgaXQKKyAgICBuZWVkcyBuZWVkIHRv IGJlIGdpdmVuIHRoZSBpbnRlcm1lZGlhdGUgY2VydGlmaWNhdGVzLiBUaGUgQ0FzIHNob3VsZAor ICAgIGJlIGFibGUgdG8gcHJvdmlkZSB5b3Ugc3VjaCBpbnRlcm1lZGlhdGUgY2VydGlmaWNhdGUg cGFja2FnZXMgdGhhdCBjYW4gYmUKKyAgICBpbnN0YWxsZWQgb24gdGhlIHNlcnZlci48L3A+CisK KzxwPllvdSBuZWVkIHRvIGluY2x1ZGUgdGhvc2UgaW50ZXJtZWRpYXRlIGNlcnRpZmljYXRlcyB3 aXRoIHRoZQogICAgIDxjb2RlIGNsYXNzPSJkaXJlY3RpdmUiPjxhIGhyZWY9Ii4uL21vZC9tb2Rf c3NsLmh0bWwjc3NsY2VydGlmaWNhdGVjaGFpbmZpbGUiPlNTTENlcnRpZmljYXRlQ2hhaW5GaWxl PC9hPjwvY29kZT4KLSAgICBkaXJlY3RpdmUuIFRoaXMgZW5zdXJlcyB0aGF0IHRoZSBpbnRlcm1l ZGlhdGUgQ0EgY2VydGlmaWNhdGUgaXMKLSAgICBzZW50IHRvIHRoZSBicm93c2VyLCBmaWxsaW5n IHRoZSBnYXAgaW4gdGhlIGNlcnRpZmljYXRlIGNoYWluLjwvcD4KKyAgICBkaXJlY3RpdmUuLjwv cD4KIAogPC9kaXY+PGRpdiBjbGFzcz0idG9wIj48YSBocmVmPSIjcGFnZS1oZWFkZXIiPjxpbWcg YWx0PSJ0b3AiIHNyYz0iLi4vaW1hZ2VzL3VwLmdpZiIgLz48L2E+PC9kaXY+CiA8ZGl2IGNsYXNz PSJzZWN0aW9uIj4K --RWP_PART_tpo21318408190 Content-Type: text/plain; charset=us-ascii --------------------------------------------------------------------- To unsubscribe, e-mail: docs-unsubscribe@httpd.apache.org For additional commands, e-mail: docs-help@httpd.apache.org --RWP_PART_tpo21318408190--