Fedora User Certificates

Dennis Gilmore dennis at ausil.us
Fri Aug 22 15:28:09 EDT 2008


On Friday 22 August 2008 01:18:44 pm Dennis Gilmore wrote:
> Sending again i forgot to sign the first reply
>
> On Friday 22 August 2008 12:46:04 pm John Gilmore wrote:
> > > Effective immediately we have replaced the CA that is in use for
> > > cvs.fedoraproject.org and koji.fedoraproject.org  This effects
> > > uploading to lookaside cache and building packages.
> >
> > How do we know whether the old CA or the new CA is the secure one?  This
> >
> > email "from Dennis" could easily be a spoof or a phish:
> > > There are some manual steps that everyone needs to do to be able to use
> > > the systems again.
> >
> > "We've had a problem and we have to re-validate your account."
> >
> > > they are
> > > login to https://admin.fedoraproject.org/accounts/  and click on the
> > > "Download a client-side certificate" link at the bottom of the home
> > > page. save the output to ~/.fedora.cert
> >
> > First give us your username and password.  We promise not to abuse it
> > unduly.
>
> I specifically did not post a link to the cert download site  because I
> don't want to
::sigh:: i need to fully read my reply before hitting send.  I meant to say 
that i did not paste a more specifc url because I did not want it to look like 
a philsing attempt.  and I also dont want to get people used to emails of that 
kind.  but i wanted to point them in the general direction of the accounts 
system.  I contemplated just saying go to the "Fedora Accounts system" and get 
a new cert.  without any other detail.  That is what i should have done in 
hindsight.

Dennis
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.laptop.org/pipermail/devel/attachments/20080822/a4268522/attachment.sig>


More information about the Devel mailing list