Re: ssl certificates [campus Certificate Authority?]

Hi Aron,

CalNetPKI is still supported by the CalNetAD team. Our future plans
include joining the Higher-Ed PKI bridge, which will allow our root cert
to be trusted by other members of the bridge and vice-versa (see
http://middleware.internet2.edu/certpolicies/). The bridge design is
still in an early stage of development, so I have no date on when it
will become production. Let me know if you have any questions.

Thanks,

John

Aron Roberts wrote:
> At 09:45 -0700 2004-09-22, Mike Friedman wrote:
>
>> I'd like to see at least a campus-sponsored CA that could be used for
>> conducting UCB business, even it it means that
>> regular customers of campus applications would have to install a campus
>> signer cert into their browsers (some departments already do this for
>> themselves). Once such a CA existed, it could be promoted and some more
>> focused education on this issue could be done.
>
>
> A question: isn't this a description of the campus's existing
> CalNetPKI service?
>
> http://calnetpki.berkeley.edu
>
> Would one of my colleagues associated with this service be willing to
> comment on its status and future plans? (I'm asking this because
> someone who was likely a prime mover in setting up this service, Eric
> Chamberlain, has recently left the university to work for smart
> card-maker ActivCard.)
>
> Aron Roberts
> Workstation Software Support Group
>
> P.S. Both the Windows and Macintosh versions of the C@B 2005 CD
> <http://cab.berkeley.edu> already support installation of the CalNetPKI
> root certificate, at least to some extent, for unmanaged end users. The
> installer on the Mac side, for instance, adds the CalNetPKI root
> certificate to the appropriate system keychain under Mac OS X 10.2 and
> above, where it is available to Apple's Safari browser and any other
> applications that use that keychain.
>
> ------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> For information about Micronet, including subscribing to
> or unsubscribing from its mailing list and finding out
> about upcoming meetings, please visit the Micronet Web site:
> <http://micronet.berkeley.edu/>.

-- 
John E. Weber
Central Computing Services - IS&T
CalNet Active Directory
University of California, Berkeley
MCSE 2003
johnweber@berkeley.edu
285 Evans Hall
(510) 642-8426
http://calnetad.berkeley.edu

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.