The XMPP Standards Foundation runs an XMPP Operators Group for administrators of XMPP servers and developers of XMPP software. Use of digital certificates is one of the discussion topics, so if you are interested in joining the conversation send email to <operators-subscribe@xmpp.org>.
+ diff --git a/ca/dynamic-dns.shtml b/ca/dynamic-dns.shtml index f364e124..1403a189 100644 --- a/ca/dynamic-dns.shtml +++ b/ca/dynamic-dns.shtml @@ -10,4 +10,5 @@The administrators of such subdomains do not have access to authorized email addresses for the root domain (e.g., dyndns.org), as described in the Certificate Issuance HOWTO.
For detailed information about this policy, please see the forum thread at <http://forum.startcom.org/viewtopic.php?t=118>. We apologize for any inconvenience this policy may cause you.
+ diff --git a/ca/index.shtml b/ca/index.shtml index 35a1641e..fbaad076 100644 --- a/ca/index.shtml +++ b/ca/index.shtml @@ -11,4 +11,5 @@The XMPP Intermediate Certification Authority is a service of the XMPP Standards Foundation, as defined in the ICA Proposal approved by the XSF membership on 2006-11-28.
+ diff --git a/ca/installation.shtml b/ca/installation.shtml index 13d8acb0..5ee22da7 100644 --- a/ca/installation.shtml +++ b/ca/installation.shtml @@ -4,7 +4,7 @@Once you have obtained a domain certificate from the XMPP ICA as explained in the Certificate Issuance HOWTO, proceed as follows to install your certificate.
+Once you have obtained a domain certificate from the XMPP ICA as explained in the Certificate Issuance HOWTO, proceed as follows to install your certificate. If you have any questions throughout this process, feel free to contact Peter Saint-Andre via email or (for faster service) IM.
Back up your "domain.csr", "domain.crt", and "domain.key" files and save them to a secure location. It's also a good idea to copy the .crt and .key files ('cp domain.crt domain.crt.in' and 'cp domain.key domain.key.in') so that they are not accidentally overwritten in the steps we describe below.
Download the ICA certificate ("sub.class1.xmpp.ca.crt").
Note: If the s_client command shows only one certificate ("Cert 0" = your domain certificate) instead of two certificates ("Cert 0" = your domain certificate and "Cert 1" = the XMPP ICA intermediate certificate) then your server software is not presenting the entire certificate chain. You may need to upgrade to a more recent version of your server software!
If you have any questions throughout this process, feel free to contact Peter Saint-Andre via email or IM.
+ diff --git a/ca/issuance.shtml b/ca/issuance.shtml index 936ed263..b357e2d1 100755 --- a/ca/issuance.shtml +++ b/ca/issuance.shtml @@ -4,7 +4,7 @@The XMPP Intermediate Certification Authority (ICA) issues free domain certificates to administrators of XMPP-based services, where the root CA is StartCom. The certificate issuance process is described on this page (the same process applies to certificate renewal if you still have the CSR, as mentioned below). If you have any questions throughout this process, feel free to contact Peter Saint-Andre via email or (for faster service) via IM.
+The XMPP Intermediate Certification Authority (ICA) issues free domain certificates to administrators of XMPP-based services, where the root CA is StartCom. The certificate issuance process is described on this page (the same process applies to certificate renewal if you still have the CSR, as mentioned below). If you have any questions throughout this process, feel free to contact Peter Saint-Andre via email or (for faster service) IM.
Before proceeding, please make sure that:
@@ -35,5 +35,5 @@Copy the verification code you have received via email and enter it into the wizard page, then click "Continue". The wizard will load a new page that shows the certificate that has been generated by StartCom. As with the private key and the CSR, copy the certificate to an ASCII file (e.g., "domain.crt").
Congratulations, you have received your free (*) certificate! Now proceed to the Certificate Installation HOWTO and follow the instructions there.
* Your certificate is free to you but is paid for by the XMPP Standards Foundation because we care about building a more secure Internet. Whereas a typical Certification Authority would charge you dozens or hundreds of dollars a year for a digital certificate, we provide certificates for free. If you would like to help support this work, please consider making a small contribution to the XMPP Standards Foundation via PayPal to <paypal@xmpp.org>. Thanks!
+ diff --git a/ca/launch.shtml b/ca/launch.shtml index 142aaa43..c373ee21 100644 --- a/ca/launch.shtml +++ b/ca/launch.shtml @@ -290,4 +290,5 @@Note: The foregoing information is used during the certificate generation process but will not be made public in any way. Please use your personal information, not information about your organization. In particular, provide a complete first name and last name (not just initials), a working email address, your postal address (including street, postal or ZIP code, city, and country), and a working phone number (this can be a business or mobile number) with country code and, if necessary, internal extension. At this stage the email address does not need to be an authorized domain address, so please use a personal address to which you have reliable access.
+ diff --git a/ca/whois.shtml b/ca/whois.shtml index 677a7347..35b72909 100644 --- a/ca/whois.shtml +++ b/ca/whois.shtml @@ -15,4 +15,5 @@To see if your TLD offers a Whois service, check the IANA Root Zone Database. If your XMPP server is affected by this policy, please encourage your TLD registrar to offer a Whois service. We apologize for any inconvenience this policy may cause you.
+