Skip to Content.
Sympa Menu

cacert-devel - Re: Automating Certificate Renewal

Subject: CAcert Code Development list.

List archive

Re: Automating Certificate Renewal


Chronological Thread 
  • From: Bernhard Fröhlich <bernhard AT cacert.org>
  • To: Jason Curl <jcurl AT arcor.de>
  • Cc: cacert-support AT lists.cacert.org, "CAcert Code Development list." <cacert-devel AT lists.cacert.org>
  • Subject: Re: Automating Certificate Renewal
  • Date: Mon, 26 Sep 2011 09:43:28 +0200
  • Authentication-results: lists.cacert.org; dkim=pass (1024-bit key) header.i= AT cacert.org; dkim-asp=none

Am 26.09.2011 09:21, schrieb Jason Curl:

Hello,

 

I had the challenge of renewing a certificate.

 

It is well known that certificate generation doesn’t work in Windows 7. And renewing certificates in Firefox doesn’t work either. I managed it by using OpenSSL.

 

My question, is there a WebAPI or something similar, so that someone can develop a small program to generate certificates, submit them for signing to CAcert, and for certificate renewal so it can be completely automated? This could make life quite easier for people who are new to the game and keep certificate generation completely secure.

 

Because getting a text block, and then having to figure out what to do with this was quite challenging for someone who already works in the software industry and understands “a tiny bit” about certificates. I couldn’t even hope to explain this to a couple of friends who want to use it for email only.

 

I’d be willing to put something together for Windows using .NET. It might take a while though…

 

Regards,

Jason.


Hi Jason,

we should take this discussion over to the development mailing list, since this is probably a development issue and support cannot do much about it.

There are some ancient issues in the bugtracker, for example https://bugs.cacert.org/view.php?id=444, as well as a Wiki page at http://wiki.cacert.org/CertApi, but my guess is that the existing API covers only very basic functionality.

But maybe the API can be adjusted/extended easily. If you could just have a look at the Wiki page, maybe you can tell us if this can be a starting point for your ideas.

Kind regards
Ted
;)

Attachment: smime.p7s
Description: S/MIME Kryptografische Unterschrift




Archive powered by MHonArc 2.6.16.

Top of Page