Re: Set up a webproxy to TOR - tor-proxy.net

[Marco Gruss <kork@xxxxxxxxxxxxxxx>]

Hi,

BlueStar88 wrote:
> What's about the StartCom-side private key generation issue?
>
> 	http://www.heise.de/english/newsticker/news/56808
>
> Tried yesterday, they're still doing it this way.
> Not the best approach, I think.
Err... just create your own secret key and a certificate request
(for example using OpenSSL's CA.sh -newreq), choose "SSL Server
Certificate (Without CSR generation)" on StartCom's web site,
copy/paste your CSR, whee, you get a signed cert without ever
revealing your secret key to StartCom.

Am I missing something?

Marco