Certificate Authority
Here you can download the Certificate Authority for the SSL certificates used for both mail and web for chrissearle.org and chrissearle.net. The certificate authority is a special certificate used to sign and therefore validate all other certificates I use. See the pages listed below for installation instructions
Opera For opera - I have no idea - it refuses to import - you'll just have to manually approve the certificates themselves for now. The .pem file is just refused (see Using a self-generated Certificate Authority for OpenSSL on debian etch for more info on this).
| Attachment | Size |
|---|---|
| cacert.pem | 4.87 KB |
Firefox 3 (mac)
To install the Certificate Authority certificate in firefox 3 on the mac:
Download cacert.pem from the parent page.
From the Preferences dialog - choose the Advanced Tab, then the Encryption sub-tab:
On this tab choose the "View Certificates" button, then on the dialog that pops up, choose the Authorities tab:
Choose the import button and select the downloaded cacert.pem. Check all checkboxes and confirm:
Scroll down and confirm the certificate is present:
Firefox 3 (win)
To install the Certificate Authority certificate in firefox 3 on windows:
Download cacert.pem from the parent page.
From the Tools > Options dialog - choose the Advanced Tab, then the Encryption sub-tab:
On this tab choose the "View Certificates" button, then on the dialog that pops up, choose the Authorities tab:
Choose the import button and select the downloaded cacert.pem. Check all checkboxes and confirm:
Scroll down and confirm the certificate is present:
Internet Explorer 7
Note - the .p12 certificate is currently not available. I will update this page when I have more info.
Download the .p12 format certificate. Make sure that it is called cacert.p12 - not cacert.htm or cacert.p12.htm. If you have file endings hidden this may happen. If the icon looks like an Internet Explorer one then the file has the wrong name. Choose Tools > Options then the content tab:
Choose the Import button to start the Certificate Import Wizard then follow this series of dialogs: Step 1:
Step 2:
Step 3 (no password entry is required - leave all fields blank): 
Step 5:
Then a security warning will appear - select yes: 
Finally - you can see the certificate installed: 
Safari/Apple Mail
Safari and Apple Mail use the system keychain.
Open the Keychain Access application (Applications > Utilities) and simply import the cacert.pem file. On Leopard it should be installed to the system keychain, on tiger to the x509anchors keychain.
I believe that for https in Safari it will work in the Login keychain - but I don't think it will work for Apple Mail there.