[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Set up a webproxy to TOR - tor-proxy.net



Hi,

BlueStar88 wrote:
> What's about the StartCom-side private key generation issue?
>
> 	http://www.heise.de/english/newsticker/news/56808
>
> Tried yesterday, they're still doing it this way.
> Not the best approach, I think.
Err... just create your own secret key and a certificate request
(for example using OpenSSL's CA.sh -newreq), choose "SSL Server
Certificate (Without CSR generation)" on StartCom's web site,
copy/paste your CSR, whee, you get a signed cert without ever
revealing your secret key to StartCom.

Am I missing something?

Marco