Linux erver hacks 2003 phần 10

Nếu bạn chưa bao giờ được sử dụng này Đó là lý do tại sao chúng tôi tạo ra Hacks Linux Server, Tập hai, một bộ sưu tập thứ hai của lời khuyên vô cùng hữu ích và thủ thuật cho việc tìm kiếm và sử dụng hàng chục các công cụ mã nguồn mở, Bộ ba thứ ba bao gồm các nhân vật thứ tám, thứ chín và thứ mười trong danh sách định dạng tập tin dài. | 95 Distributing Your CA to Client Browsers For example did you know that AOL Time Warner has its own CA How about GTE Or VISA CA certs for all of these entities and many others ship with Netscape for Linux and are all trusted authorities for web sites email and application add-ons by default. Keep this in mind when browsing to SSL-enabled sites if any one of the default authorities have signed online content then your browser will trust it without requiring operator acknowledgment as in Figure 4. Your Certificates I other People s I Web Sites I Authorities I You have certificates on file that identify these certificate authorities Certificate Name 1 Security Device 1 K VeriSign Class 2 Public Primary . Builtin Object Token i-Class 1 Public Primary OCSP Re. Builtin Object Token -Class 2 Public Primary OCSP Re. Builtin Object Token VeriSign Class 3 Public Primary . Builtin Object Token VeriSign Class 4 Public Primary . Builtin Object Token Verisign Class 2 Public Primary . Builtin Object Token Verisign Class 1 Public Primary . Builtin Object Token VeriSign Class 1 Public Primary . Builtin Object Token VeriSign Time stamping Authorit. Builtin Object Token -Verisign Class 2 Public Primary . Builtin Object Token - Verisign Class 3 Public Primary . Builtin Object Token beTRUSTed I - lllurninatus Enterprises Ltd Hagbard Celine Software Security Device I View I I Edit I I Delete j Figure 4. It s a good idea to review exactly who your browser considers trustworthy. If you value your browser s security and by extension the security of your client machine then make it a point to review your trusted CA relationships. See also The OpenSSL FAQ at http support Generating an SSL cert and Certificate Signing Request 93 Creating Your Own CA 94 200 I Information Servers Serving multiple sites with the same DocumentRoot 96 96. Serving multiple sites with the same DocumentRoot Through creative use of mod_rewrite several sites can share a DocumentRoot and .