Re: [Sks-devel] HKPS certificate

[Benny Baumann]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi,

Am 14.05.2015 um 13:02 schrieb Christiaan de Die le Clercq:
> Hi!
> 
> I am wondering if I can still get a certificate for
> keys.techwolf12.nl, my server has been stable for over 3 months now
> and I would like to add an extra layer of security.
Last time I contacted Kristian about certificates for HKPS it ended in
me asking nasty questions about missing CRL and OCSP URIs in the
certificates making them practialy irrevocable ...

Which lead to the situation that I specifically need to disable OCSP
stapling in my nginx for those 3 domains.
> 
> I've emailed Kristian a few times now without getting a response.
Might take a few days for him to reply. Be patient.
> 
> Does anyone know how to get an certificate?
Actually you send a CSR to Kristian and get your signed certificate
back. Which reminds me: I should send Kristian two new CSRs for server
aliases of my key server ;-)

Regards,
BenBE.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=G7pY
-----END PGP SIGNATURE-----