Boost logo

Boost :

Subject: Re: [boost] [website] SSL certificate
From: David Abrahams (dave_at_[hidden])
Date: 2010-08-16 01:54:37

[Sorry for the long quote, but this all looks like relevant info and
the thread has been dead a while...]

At Mon, 14 Jun 2010 09:55:17 -0700,
admin_at_[hidden] wrote:
> I recently switched from Firefox to Chromium, and I've been having issues
> accessing [1] It seems that the SSL certificate used
> for [2] is either not properly configured, or not issued by one
> of the major SSL certificate providers (e.g. VeriSign, GoDaddy). Examination
> of the certificate indicates that it's issued by the Computer Science
> Department of Indiana University, and the certificate doesn't have a chain
> that leads back to a well known CA (the chain is just '[3] =>
> [4]', and most browsers I've tried don't recognize
> [5] as a legitimate CA by default).
> If this isn't just a matter of improper configuration (or, for that matter,
> just a matter of my browsers being screwy), I'd be happy to offer my own SSL
> certificate to Boost. The certificate is a standard SSL certificate issued
> by GoDaddy (domain controlled validation, certificate signing algorithm is
> RSA 2048 bits), and it's paid through 02/20/2011.
> I'm currently using my cert for my Debian mirror, so I would have to revoke
> the current certificate, and then submit a CSR from [6]'s server.
> Ideally, then I would generate a CSR request, and the boost server would
> sign it; I'd end up with a cert chain of 'mysite => [7] =>
> GoDaddy'. [8] and subdomains would have a cert signed directly by
> GoDaddy, so the [9] cert would be verify by most browsers
> automatically.
> If there's any interest in this, please let me know.
> - Bryce Lelbach
> References
> 1.
> 2.
> 3.
> 4.
> 5.
> 6.
> 7.
> 8.
> 9.

If we still don't have a valid cert, we should cert-ainly (sorry)
consider taking Bryce up on his offer. Bryce, is this a wildcard
cert? If not, how can it work for our subdomains?

Dave Abrahams
BoostPro Computing

Boost list run by bdawes at, gregod at, cpdaniel at, john at