Difference between revisions of "SSL Certificaten"

From Cncz
Jump to: navigation, search
m ([Heartbleed OpenSSL lek][Heartbleed OpenSSL bug])
([Heartbleed OpenSSL lek][Heartbleed OpenSSL bug])
Line 32: Line 32:
 
[en]
 
[en]
 
[/en]
 
[/en]
* squirrel.science.ru.nl: [De oude Science webmailservice was kwetsbaar sinds 29 januari 2014.][The old Science webmail service was vulnerable since January 29, 2014.]
+
* Mail[gebruikers][ users]:
 
+
** squirrel.science.ru.nl: [De oude Science webmailservice was kwetsbaar sinds 29 januari 2014.][The old Science webmail service was vulnerable since January 29, 2014.]
* roundcube.science.ru.nl: [De nieuwe Science webmailservice.][The new Science webmail service.]
+
** roundcube.science.ru.nl: [De nieuwe Science webmailservice.][The new Science webmail service.]
 
+
** autoconfig.science.ru.nl: [De website voor automatische configuratie van mailprogramma's als Thunderbird en Outlook.][The website for automatic configuration of mail clients like Thunderbird and Outlook.]
* autoconfig.science.ru.nl: [De website voor automatische configuratie van mailprogramma's als Thunderbird en Outlook.][The website for automatic configuration of mail clients like Thunderbird and Outlook.]
 
  
 
* [Docenten][Lecturers]: dossiers.science.ru.nl [en][and] eduview.science.ru.nl
 
* [Docenten][Lecturers]: dossiers.science.ru.nl [en][and] eduview.science.ru.nl

Revision as of 13:20, 11 April 2014

SSL certificates

Any service accessible via SSL (https) must have an SSL certificate. This includes any web server with encrypted or "secure" content. An SSL (Secure Socket Layer) certificate is a signed electronic guarantee that a particular server is the server it claims to be. Certificates are used primarily (but not exclusively) for providing web pages via an encrypted connection. A certificate is signed by a Certificate Authority (CA) which ensures the integrity of the certificate.

A few Certificate Authorities such as Verisign, Thawte, and Terena are automatically trusted by SSL clients (including web browsers), so certificates signed by these companies are validated without user confirmation. Until recently C&CZ signed its own certificates but now all certificates of servers and web applications are signed by Terena (through SURFdiensten).

Obtaining a certificate

Because SSL certificates are used as proof of the validity of the web site or server, it is not possible to acquire a signed SSL certificate for just any domain name. The Certificate Authorities check if the person or organisation requesting a certificate is indeed the owner of the domain name for which the certificate is requested. Domain names registered through C&CZ are owned by the Radboud University. Therefore C&CZ can also request SSL Certificates for these domain names.

Heartbleed OpenSSL bug