Re: [foaf-dev] Webid and IS, private conversation partly forwarded

This is a cryptographically signed message in MIME format.

--===============4752997896059239025==
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms050506050501050605060301"

This is a cryptographically signed message in MIME format.

--------------ms050506050501050605060301
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: quoted-printable

On 3/5/14 3:51 PM, Peter Williams wrote:
> don't recall if I ever really nailed how to make IIS accept a=20
> self-signed client cert that had never been previously added to a=20
> windows cert trust store. This was the breakdown point, since my goals =

> were to use IIS native SSL (not some software library added to IIS).=20
> WIndows SSL comes with several architectural/assurance properties=20
> (that make it fit to be a cloud platform, and is not just some=20
> user-mode protocol handler in apache (where everything about security=20
> handling is simple/simplistic and =E2=80=9Csetup=E2=80=9D for ease of e=
xploit insertion).
>
> Not a simple answer. But, it was not an easy problem. Making security=20
> toys is trivial; but I was not trying to make a demo.

Peter,

See:=20
http://blogs.msdn.com/b/azuredevsupport/archive/2010/02/24/how-to-install=
-a-chained-ssl-certificate.aspx=20
=2E

Once the signer cert is properly inserted into the Azure (Microsoft)=20
trust chain, you can then use this signer certificate to sign personal=20
certificates which include WebIDs in the SAN slot. That should be it.

--=20

Regards,

Kingsley Idehen=09
Founder & CEO
OpenLink Software
Company Web: http://www.openlinksw.com
Personal Weblog: http://www.openlinksw.com/blog/~kidehen
Twitter Profile: https://twitter.com/kidehen
Google+ Profile: https://plus.google.com/+KingsleyIdehen/about
LinkedIn Profile: http://www.linkedin.com/in/kidehen






--------------ms050506050501050605060301
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms050506050501050605060301--

--===============4752997896059239025==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
foaf-dev mailing list
foaf-dev-RyYwo1q5J+qsOXdr9/[email protected]
http://lists.foaf-project.org/mailman/listinfo/foaf-dev
--===============4752997896059239025==--