Introduction
We use SSL Certificates to encrypt communications to our mailserver and webserver. All of our Certificates for standard services are signed with by ipSCA. We do have our own Certificate Authority to provide certificates for miscellaneous applications, and student or research projects. If you include our CA certificate into your SSL application, then that application can verify each of the other certificates even if we need to change a certificate in the future.
Download CS Department Certificate Authority
How to incorporate our CA into OS certificate managment systems
- Mac OS X 10.5 (Leopard) -- Safari, Mail
- You need to download the cert and then double-click it. This will start the "Keychain Access" application. You should to add it to the "login" for the current user, or the "System" keychain if it is to be shared by all the users of this machine. ou should to add it to the "System" keychain using the Keychain pulldown.Picture
You'll need to add it separately to some application that don't use the keychain (Firefox, Thunderbird, Mulberry).
- Mac OS X 10.4 (Tiger) -- Safari, Mail
- You need to download the cert and then double-click it. This will start the "Keychain Access" application. You should to add it to the "X509Anchors" keychain using the Keychain pulldown. Picture
You'll need to add it separately to some application that don't use the keychain (Firefox, Thunderbird, Mulberry).
- Windows XP -- Internet Explorer, Outlook & Outlook Express
- Click our CA link in Internet Explorer. Open the downloaded CA and click "Install Certificate...". This will open the "Certificate Import Wizard". Accept the default options and add it as a Certificate Authority.Picture
You'll need to add it separately to some application that don't use the Internet Explorer certificate (Firefox, Thunderbird, Mulberry).
- Linux
- Try putting our CA in "/usr/lib/ssl/certs" and make a symlink to it named "e84e0601.0". Let us know if this works.
Again, you'll probably need to add it to Firefox and Thunderbird separately.
How to incorporate our CA into applications
- Firefox
- Asks you if you want to add it just by clicking on this CA link.
Picture
√ Trust this CA to identify web sites.
√ Trust this CA to identify email users.
√ Trust this CA to identify software developers.
- Thunderbird
- Asks you if you want to 'Accept this certificate permanently'.
- Mulberry
- The first time you connect to our server it will ask you if you want to Accept and Save the certificate. Picture Δ
You can also download the certificate and use Mulberry Preferences to save the certificate. Open "Preferences" and click the "Security" button. On the bottom of the "Security Preferences" click the "Manage Certificates..." button. Select the "Authorities" tab and click "Import...". This will open a filebrowser that will allow you to select the CA_cert.crt file that you downloaded from the Systems web page.
