Do I need ca-certificates on my server? - Teh Forum

<body> <div id="header"> <span class="left"> <span class="back"><a href="lthread_list.php?webtag=DEFAULT"><span class="image mobile_back" title="Back"></span></a></span> <span class="image mobile_logo" title="Beehive Forum Logo"></span> </span> <ul> <li> <a class="reply_all" href="lpost.php?webtag=DEFAULT&reply_to=41025.0&return_msg=41025.1"> <span class="image mobile_reply_all"></span><span class="text">Reply to All</span> </a> </li> <li> <a class="navigation" href="#"> <span class="image mobile_navigation"></span><span class="text">Show messages</span> </a> </li> <li> <a class="main" href="#"><span class="image mobile_menu" title="Menu"></span> </a> </li> </ul> </div> <div class="menu main"> <ul> <li><a href="lthread_list.php?webtag=DEFAULT">Messages</a></li> <li><a href="lpm.php?webtag=DEFAULT">Inbox</a></li> <li><a href="lsearch.php?webtag=DEFAULT">Search</a></li> <li><a href="llogon.php?webtag=DEFAULT">Login</a></li> </ul> </div> <div class="menu navigation"><a href="lmessages.php?webtag=DEFAULT&msg=41025.1">1–8</a></div> <div id="page_content"> <h3 class="thread_title"><a href="index.php?webtag=DEFAULT&amp;msg=41025.1">Do I need ca-certificates on my server?</a> </h3> <div id="messages" data-navigation="41025_1_8_10"> <a name="a41025_1"></a><div class="message" id="message_41025_1"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time">10 Apr 2014 12:40</span> <div class="clearer"></div> </div><div class="message_to">To: ALL<span class="message_count">1 of 8</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41025.1">41025.1</a></div> <div class="message_body"> I'm running a slightly overdue update on a staging server, and it's re-doing all the "ca-certificates", an excruciatingly slow process (normally updates run about 10-minutes, this is pushing a half hour already).<br /><br /> I'm not doing any e-commerce on this server (ISTR testing it on it once or twice, for production elsewhere). Can I safely nuke the certificates?<br /><br /> Edit: Or can I prune them down to the half-dozen most commonly used (in case I need to do more testing in future)? It's done about 50 so far. <span style="color:#FF0000;"><em>And it's really starting to piss me off!</em></span> <span class="emoticon e_horror" title=":-&"><span class="e__">:-&</span></span> <div class="edit_text">EDITED: 10 Apr 2014 12:47 by DSMITHHFX</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41025.1&return_msg=41025.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41025.1"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41025_2"></a><div class="message" id="message_41025_2"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time">10 Apr 2014 15:02</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 10 Apr 2014 15:35"></span></span> <span class="message_count">2 of 8</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41025.2">41025.2</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41025.1#a41025_1" target="_self">41025.1</a></div> <div class="message_body"> It'll be replacing them because of Heartbleed. And it'll be slow because everyone else in the world is doing the same thing.<br /><br /> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41025.2&return_msg=41025.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41025.2"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41025_3"></a><div class="message" id="message_41025_3"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time">10 Apr 2014 15:37</span> <div class="clearer"></div> </div><div class="message_to">To: Drew (X3N0PH0N) <span><span class="image post_read" title="Read: 10 Apr 2014 15:42"></span></span> <span class="message_count">3 of 8</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41025.3">41025.3</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41025.1#a41025_2" target="_self">41025.2</a></div> <div class="message_body"> Yeah, I figured. The download wasn't slow, it was the onboard re-compiling that was killer (it's on a G4 ppc). So... do I need 'em or no?</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41025.3&return_msg=41025.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41025.3"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41025_4"></a><div class="message" id="message_41025_4"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time">10 Apr 2014 15:45</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 10 Apr 2014 15:47"></span></span> <span class="message_count">4 of 8</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41025.4">41025.4</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41025.1#a41025_3" target="_self">41025.3</a></div> <div class="message_body"> I don't know, sorry. That's a side of things I know absolutely fuck all about.<br /><br /> My *guess* would be that, given that it's a staging thing and I don't suppose many people will be using it, get everyone who uses it to add a security exception? And maybe self-sign as a little tiny bit of protection.</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41025.4&return_msg=41025.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41025.4"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41025_5"></a><div class="message" id="message_41025_5"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time">10 Apr 2014 15:52</span> <div class="clearer"></div> </div><div class="message_to">To: Drew (X3N0PH0N) <span><span class="image post_read" title="Read: 10 Apr 2014 16:08"></span></span> <span class="message_count">5 of 8</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41025.5">41025.5</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41025.1#a41025_4" target="_self">41025.4</a></div> <div class="message_body"> It's not a certificate for my server (which I don't run https on), it's a bunch of certificates that mostly appear to be for online transactions (e.g. thawte, a bunch of banks &ct). *I guess*<br /><br /> <a href="https://launchpad.net/ubuntu/+source/ca-certificates">https://launchpad.net/ubuntu/+source/ca-certificates</a><br /><br /> "PEM files of CA certificates to allow SSL-based applications to check for the authenticity of SSL connections."</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41025.5&return_msg=41025.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41025.5"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41025_6"></a><div class="message" id="message_41025_6"> <div class="message_header"> <div class="message_from"> From: Drew (X3N0PH0N)<span class="message_time">10 Apr 2014 16:10</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 10 Apr 2014 16:22"></span></span> <span class="message_count">6 of 8</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41025.6">41025.6</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41025.1#a41025_5" target="_self">41025.5</a></div> <div class="message_body"> You can still self-sign. But yeah, whether it'll actually work is another matter. But then I guess you don't actually <em>need</em> that part to work so...?</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41025.6&return_msg=41025.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41025.6"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41025_7"></a><div class="message" id="message_41025_7"> <div class="message_header"> <div class="message_from"> From: Matt<span class="message_time">10 Apr 2014 16:36</span> <div class="clearer"></div> </div><div class="message_to">To: CHYRON (DSMITHHFX) <span><span class="image post_read" title="Read: 10 Apr 2014 16:56"></span></span> <span class="message_count">7 of 8</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41025.7">41025.7</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41025.1#a41025_5" target="_self">41025.5</a></div> <div class="message_body"> You want them. CA Certificates are those used by the certificate vendors to verify other SSL certificates, they're not just used for HTTPS but lots of other SSL transports. Without up to date CA certificates your ability to communicate securely over SSL is as good as non existent.<div class="edit_text">EDITED: 10 Apr 2014 16:37 by MATT</div> </div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41025.7&return_msg=41025.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41025.7"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div><a name="a41025_8"></a><div class="message" id="message_41025_8"> <div class="message_header"> <div class="message_from"> From: CHYRON (DSMITHHFX)<span class="message_time">10 Apr 2014 17:00</span> <div class="clearer"></div> </div><div class="message_to">To: Matt <span><span class="image post_read" title="Read: 10 Apr 2014 17:00"></span></span> <span class="message_count">8 of 8</span><div class="clearer"></div> </div> </div> <div class="message_links"> <a href="lmessages.php?webtag=DEFAULT&msg=41025.8">41025.8</a> In reply to <a href="lmessages.php?webtag=DEFAULT&msg=41025.1#a41025_7" target="_self">41025.7</a></div> <div class="message_body"> OK, thanks. I can't remember if they were onboard the original ubuntu server installation, a package dependency, or I deliberately installed them. Maybe they're using stronger encryption, which could explain why they seemed so slow today. Apparently they're not updated very frequently.</div> <div class="message_footer"> <div class="message_footer_links"><a href="lpost.php?webtag=DEFAULT&reply_to=41025.8&return_msg=41025.1" class="reply"><span class="image post"></span>Reply</a></div> <div class="message_vote_form" data-msg="41025.8"> <span class="rating">0/0</span> <span class="image vote vote_down vote_down_off" title="Vote Down"></span> <span class="image vote vote_up vote_up_off" title="Vote Up"></span> </div> </div> </div></div> </div> </body>