[Nfd-dev] Secure websocket support in NFD?

[Alex Afanasyev]

There are places where you can get free certificates.  http://www.startssl.com/ <http://www.startssl.com/> is one and https://letsencrypt.org/ <https://letsencrypt.org/> will be another one.

The problem is just someone needs to have domain name first, then it someone needs to actually generate cert, sign it, and then configure.  Nothing extraordinary, just takes time and effort.



> On Jan 23, 2015, at 12:36 PM, Junxiao Shi <shijunxiao at email.arizona.edu> wrote:
> 
> Hi Wentao
> 
> Purchasing certificates shouldn't be a problem. Entry level certificates can be purchased within 10 minutes.
> During development and testing, you could use your own CA (Windows Server Certificate Authority or OpenSSL).
> 
> The configuration file should just accept:
> 
> * a private key
> * a bundle of certificates including root CA, intermediate CAs, and site certificate
> 
> Yours, Junxiao
> 
> On Jan 23, 2015 1:30 PM, "Wentao Shang" <wentaoshang at gmail.com <mailto:wentaoshang at gmail.com>> wrote:
> >
> > Hi Junxiao,
> >
> > Alex reminded me of another important issue: if we want to serve https/wss, we need to get certificates from CAs somehow. I don't have experience with https deployment so not sure how difficult this will be.
> >
> > Wentao
> >
> 
> _______________________________________________
> Nfd-dev mailing list
> Nfd-dev at lists.cs.ucla.edu
> http://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20150123/29a2cfd5/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://www.lists.cs.ucla.edu/pipermail/nfd-dev/attachments/20150123/29a2cfd5/attachment.bin>