Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / First Aid / March 2008

Tip: Looking for answers? Try searching our database.

SSL Certificates?

Thread view: 
Knute Johnson - 29 Feb 2008 01:18 GMT
Has anybody here actually bought a certificate for their Applet or JWS
project?  Where did you buy and approximately what do they cost?  Will a
SSL cert from godaddy work for a Java Applet or JWS program?

Thanks,

Signature

Knute Johnson
email s/nospam/knute/

     ------->>>>>>http://www.NewsDem

Roedy Green - 02 Mar 2008 12:36 GMT
On Thu, 28 Feb 2008 17:18:59 -0800, Knute Johnson
<nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
someone who said :

>Has anybody here actually bought a certificate for their Applet or JWS
>project?  Where did you buy and approximately what do they cost?  Will a
>SSL cert from godaddy work for a Java Applet or JWS program?

see http://mindprod.com/jgloss/certificate.html

I list sources and approximate prices.

The more recognisable the brand the higher the premium.
--

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com
Sabine Dinis Blochberger - 03 Mar 2008 09:58 GMT
> On Thu, 28 Feb 2008 17:18:59 -0800, Knute Johnson
> <nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
[quoted text clipped - 9 lines]
>
> The more recognisable the brand the higher the premium.

I see you don't list CAcert <http://www.cacert.org>

They strive to provide certificates to everyone, for no cost.
Signature

Sabine Dinis Blochberger

Op3racional
www.op3racional.eu

Roedy Green - 05 Mar 2008 04:27 GMT
On Mon, 03 Mar 2008 09:58:52 GMT, Sabine Dinis Blochberger
<no.spam@here.invalid> wrote, quoted or indirectly quoted someone who
said :

>I see you don't list CAcert <http://www.cacert.org>

They seem to have a web of trust scheme similar to PGP.  but they
don't anywhere I can see answer the most obvious question
"What kinds of certificate do they issue?"

SSL? , Java code signing? SMIME? etc.?

I have a query in.

--

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com
Sabine Dinis Blochberger - 06 Mar 2008 10:13 GMT
> On Mon, 03 Mar 2008 09:58:52 GMT, Sabine Dinis Blochberger
> <no.spam@here.invalid> wrote, quoted or indirectly quoted someone who
[quoted text clipped - 9 lines]
>
> I have a query in.

On the right, under "About CAcert" there are some resources.

Maybe this will help
<http://wiki.cacert.org/wiki/FAQ/TechnicalQuestions>

Signature

Sabine Dinis Blochberger

Op3racional
www.op3racional.eu

Sabine Dinis Blochberger - 06 Mar 2008 10:14 GMT
> On Mon, 03 Mar 2008 09:58:52 GMT, Sabine Dinis Blochberger
> <no.spam@here.invalid> wrote, quoted or indirectly quoted someone who
[quoted text clipped - 9 lines]
>
> I have a query in.

And also
<http://wiki.cacert.org/wiki/CodesigningCert>
Signature

Sabine Dinis Blochberger

Op3racional
www.op3racional.eu

Roedy Green - 02 Mar 2008 12:38 GMT
On Thu, 28 Feb 2008 17:18:59 -0800, Knute Johnson
<nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
someone who said :

> Will a
>SSL cert from godaddy work for a Java Applet or JWS program?

No, you need a separate Java code-signing cert for that.

See http://mindprod.com/jgloss/certificate.html for details.

Chase relevant links at the bottom of the page.

It seems to take a huge effort, but once you understand it is you
wonder what all the fuss was about. I get my ant scripts to sign, and
I can generate certs with bat files.
--

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com
Knute Johnson - 03 Mar 2008 01:12 GMT
> On Thu, 28 Feb 2008 17:18:59 -0800, Knute Johnson
> <nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
[quoted text clipped - 17 lines]
> The Java Glossary
> http://mindprod.com

Thanks I did look at your site and it was quite helpful.  I think for
now the price of certs is too dear for what I'm trying to deliver.

Signature

Knute Johnson
email s/nospam/knute/

Roedy Green - 03 Mar 2008 03:16 GMT
On Sun, 02 Mar 2008 17:12:44 -0800, Knute Johnson
<nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
someone who said :

>Thanks I did look at your site and it was quite helpful.  I think for
>now the price of certs is too dear for what I'm trying to deliver.

The cost of a cert is the cost of researching to prove you are whom
you claim to be.  If we had a government id, a good technological
unforgeable one that could be used over the net, then you would not
even need to buy code signing certs. Your id, with a bit of software
would be come the code signing cert.
--

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com
Knute Johnson - 03 Mar 2008 04:37 GMT
> On Sun, 02 Mar 2008 17:12:44 -0800, Knute Johnson
> <nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
[quoted text clipped - 9 lines]
> would be come the code signing cert.
> --

I know it is a little different up there but down here we don't much
like those things :-).  Something in our genes.  But you are correct.

Signature

Knute Johnson
email s/nospam/knute/

Roedy Green - 03 Mar 2008 07:17 GMT
On Sun, 02 Mar 2008 20:37:32 -0800, Knute Johnson
<nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
someone who said :

>I know it is a little different up there but down here we don't much
>like those things :-).  Something in our genes.  But you are correct.

Having an ID is one thing, being required to show it is what makes it
big brother.  I remember when Canadian politicians promised a SIN
number would be used only for unemployment insurance.  Now you can't
open a bank account without one.

Without a digital ID, there is too much potential for fraud on the
Internet. In that I include:
spam
identity theft
credit card fraud
spying.

You should be able to pay for something without identifying yourself,
the equivalent of Internet cash.

--

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com
Knute Johnson - 03 Mar 2008 17:16 GMT
> On Sun, 02 Mar 2008 20:37:32 -0800, Knute Johnson
> <nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
[quoted text clipped - 17 lines]
> You should be able to pay for something without identifying yourself,
> the equivalent of Internet cash.

Yep!

Signature

Knute Johnson
email s/nospam/knute/

     ------->>>>>>http://www.NewsDem

Roger Lindsjö - 08 Mar 2008 19:22 GMT
> On Sun, 02 Mar 2008 17:12:44 -0800, Knute Johnson
> <nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
[quoted text clipped - 5 lines]
> The cost of a cert is the cost of researching to prove you are whom
> you claim to be.  

Not really. The ones I looked at charge similar amouts year after yer,
and you would expect verifying my identity would be high the first time
and lower the following years. Also, they seem to charge again if I need
certificates for Java, Brew, SSL etc, again where only one identity
verification would be needed.

Signature

Roger Lindsjö

Roedy Green - 09 Mar 2008 00:04 GMT
On Sat, 08 Mar 2008 20:22:13 +0100, Roger Lindsjö
<news.nospam@tilialacus.net> wrote, quoted or indirectly quoted
someone who said :

>Not really. The ones I looked at charge similar amouts year after yer,
>and you would expect verifying my identity would be high the first time
>and lower the following years. Also, they seem to charge again if I need
>certificates for Java, Brew, SSL etc, again where only one identity
>verification would be needed.

The price is determined by market forces. The vendor's  cost is
determined by the labour required to validate a cert. So we both can
be right.
--

Roedy Green Canadian Mind Products
The Java Glossary
http://mindprod.com
Sabine Dinis Blochberger - 03 Mar 2008 09:59 GMT
> > On Thu, 28 Feb 2008 17:18:59 -0800, Knute Johnson
> > <nospam@rabbitbrush.frazmtn.com> wrote, quoted or indirectly quoted
[quoted text clipped - 20 lines]
> Thanks I did look at your site and it was quite helpful.  I think for
> now the price of certs is too dear for what I'm trying to deliver.

Have a look at CAcert <http://www.cacert.org>
Signature

Sabine Dinis Blochberger

Op3racional
www.op3racional.eu



Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.