RE: [cobalt-security] Self Generated SSL Certificate problem

["Michael Kovalik" <admin@xxxxxxxxxxxxxxxx>]

>>Or if you wanted to be tricky about it, you could SSH into the
>>server and use the copy of OpenSSL to generate a CA certificate.
>>Then load this CA certificate (public side of course) into your
>>browser. Then use this CA certificate to sign the certificate
>>used by Cobalt Admin. This way, your browser can authoritivly
>>approve the certificates authenticity and you havent had to
>>shell out any money or install any other software.

>This seems like a neat trick but even though *you* won't get an error
>message in *your* browser, won't  *everyone* elses browser still show the
>error because their browsers aren't preprogrammed to recognize you as a CA?

True, however ... In many cases, only one person (or a small group) needs
to access the administrative interface. Also, if your virtual-host admins
want to access theirs they either a) get exactly the same error message
as they would have gotten before (or) b) you give them a copy of the CA
certificate when they sign up and call it "part of the key to the secure
admin area"