[BlueOnyx:06767] Re: [coba-e:16681] Re: SSL Key Lenth too short. need 2048 or 4096

[Darrell D. Mobley]

> -----Original Message-----
> From: blueonyx-bounces at blueonyx.it [mailto:blueonyx-bounces at blueonyx.it]
> On Behalf Of Darrell D. Mobley
> Sent: Monday, March 21, 2011 2:45 PM
> To: coba-e at bluequartz.org; 'BlueOnyx General Mailing List'
> Subject: [BlueOnyx:06763] Re: [coba-e:16681] Re: SSL Key Lenth too short.
> need 2048 or 4096
> 
> I am posting this in BX as well.  My SSL cert company today told me they
> aren't accepting anything below 2048 bit keys any longer.  Can we request
> for an update to the GUI to allow us to pick 1024, 2048 or 4096 bit keys
> (and maybe default it to 2048)?

I added a new 2048-bit SSL certificate today from Geotrust DBA Rapid SSL to
a website on BX server.  I installed the intermediate server as "ca-certs",
restarted httpd and tested the installation at 

https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=co
ntent&id=SO9556&actp=LIST&viewlocale=en_US

Status was successful.

Does an end user (who uses IE) need to do anything to display the URL
Location area in green?  The link above, in IE, displays the URL in green,
while https connections to the site on my server does not, but it does
display a locked lock.  Is this because of the browser recognizing the
certificate authority?  In the case of the above URL, the CA is Geotrust,
Inc., where as with my cheapo RapidSSL cert, it's RapidSSL CA.