Re: Let's Encrypt, free SSL/TLS certs

It's not a "Cert Signer" ... :) All you would need to do is import the CA
chain in order to trust it.

I'm pretty sure they're not there by default. Only Verisign and a few
others are there by default.

Brad
www.bvstools.com

On Mon, Jan 11, 2016 at 12:36 PM, Aaron Bartell <aaronbartell@xxxxxxxxx>
wrote:

If you use this and you have to tell a user how to "trust" it with your

application (no matter the platform), it may not be the best solution until
the big players include them in the standard CA lists.


I was curious about the same thing. The certs they sign are being used on
their website (letsencrypt.com) and here's a screenshot of it being valid
with IE 8 on XP which is a pretty good test:
http://www.screencast.com/t/kiOHWzRr9W

Check out the top FAQ for more info:
https://community.letsencrypt.org/t/frequently-asked-questions-faq/26

I don't know if their cert signer is on IBM i in DCM. Haven't checked.
But in the end it really only matters that browsers support it, and those
are in large part updated regularly.

Aaron Bartell
litmis.com - Services for open source on IBM i


On Mon, Jan 11, 2016 at 12:21 PM, Bradley Stone <bvstone@xxxxxxxxx> wrote:

It should work fine no matter the CA... as long as your application
"trusts" the CA.

If you use this and you have to tell a user how to "trust" it with your
application (no matter the platform), it may not be the best solution

until

the big players include them in the standard CA lists.

Brad
www.bvstools.com

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.