Systems Status

Announce RSS Feed RSS

Blog RSS Feed RSS

Help Topics

Deschutes Facilities

Campus Facilities

User Account Info

Roundcube Mail

Contact Systems

ipv6 ready

Introduction

We use SSL Certificates to encrypt communications to our mailserver and webserver. All of our Certificates for standard services are signed with by ipSCA. We do have our own Certificate Authority to provide certificates for miscellaneous applications, and student or research projects. If you include our CA certificate into your SSL application, then that application can verify each of the other certificates even if we need to change a certificate in the future.

Download CS Department Certificate Authority

How to incorporate our CA into OS certificate managment systems

Mac OS X 10.5 (Leopard) -- Safari, Mail
You need to download the cert and then double-click it. This will start the "Keychain Access" application. You should to add it to the "login" for the current user, or the "System" keychain if it is to be shared by all the users of this machine. ou should to add it to the "System" keychain using the Keychain pulldown.Picture

You'll need to add it separately to some application that don't use the keychain (Firefox, Thunderbird, Mulberry).
Mac OS X 10.4 (Tiger) -- Safari, Mail
You need to download the cert and then double-click it. This will start the "Keychain Access" application. You should to add it to the "X509Anchors" keychain using the Keychain pulldown. Picture

You'll need to add it separately to some application that don't use the keychain (Firefox, Thunderbird, Mulberry).
Windows XP -- Internet Explorer, Outlook & Outlook Express
Click our CA link in Internet Explorer. Open the downloaded CA and click "Install Certificate...". This will open the "Certificate Import Wizard". Accept the default options and add it as a Certificate Authority.Picture

You'll need to add it separately to some application that don't use the Internet Explorer certificate (Firefox, Thunderbird, Mulberry).
Linux
Try putting our CA in "/usr/lib/ssl/certs" and make a symlink to it named "e84e0601.0". Let us know if this works.

Again, you'll probably need to add it to Firefox and Thunderbird separately.

How to incorporate our CA into applications

Firefox
Asks you if you want to add it just by clicking on this CA link.
Picture
√ Trust this CA to identify web sites.
√ Trust this CA to identify email users.
√ Trust this CA to identify software developers.
Thunderbird
Asks you if you want to 'Accept this certificate permanently'.
Mulberry
The first time you connect to our server it will ask you if you want to Accept and Save the certificate. Picture Δ

You can also download the certificate and use Mulberry Preferences to save the certificate. Open "Preferences" and click the "Security" button. On the bottom of the "Security Preferences" click the "Manage Certificates..." button. Select the "Authorities" tab and click "Import...". This will open a filebrowser that will allow you to select the CA_cert.crt file that you downloaded from the Systems web page.
Edited: February 03, 2009, at 05:56 PM
Copyright © 2017, University of Oregon, All rights reserved
Privacy Policy