259
ThisappendixcontainssectionsdescribingCertificatesandCertificate
Authorityandprovidesdirectionsabouthowto:
• InstallDominionSXCACertificatetoaBrowserCertificate
• InstallSXServerCertificateforIEBrowsers
• InstallSXServerCertificateforNetscapeNavigator
• InstallaThirdPartyRootCertificateInBrowsers
• **GenerateaCSRforaTh
irdPa
rtyCAtosign.
• **InstallThirdPartyCertificatetoSX.
• **InstallClientCertificaterootintotheSX.
• **InstallClientCertificateintoInternetExplorer
• **InstallClientCertificateintoNetscapeNavigator
ACertificateauthority(CA)isanentitywhichissuesdigitalcertificates
forusebyoth
e
rparties.Thesecertificatescontainapublicandprivate
keypairasdescribedinstandardcryptographyreferences.Thereare
manycommercialCAsthatchargefortheirservices;however,the
DominionSXactsasafreeCAthatgeneratesitsowncertificates.CAand
certificatesarepartofhighlyav
ailablesecu
ritytechnologythatcanbe
builtintobrowsersandwebservers‐inparticularSSL.Browsersand
OperatingSystemscomewithapre‐installedlistoftrustedCertification
Authorities,knownastheTrustedRootCAstore.TheDominionSX
certificatescanbeaddedintoabrowserasTrustedCA.
In This Chapter
DefaultSXCertificateAuthoritySettings...................................................260
InstallCARootforIEBro
wsers...................................................................260
InstallDomini
onSXServerCertificateforNetscapeNavigator.............263
InstallaThird‐Par
tyRootCertificate..........................................................265
ImportCertif
icatesforLDAP.......................................................................270
Appendix C
Certificates
Commentaires sur ces manuels