Why are no instructions given about how to self-sign a certificate?

fifthsegment / Gatesentry

🌟 Elevate Network Safety with Gatesentry! A powerful Proxy & DNS server combo, adept at blocking harmful content. Ensure a secure and focused online space for kids and adults alike. Dive into a world of enhanced security and productivity now! #SecureNetwork #FocusedBrowsing

Apache License 2.0

60 stars 8 forks source link

Why are no instructions given about how to self-sign a certificate? #9

Closed leeand00 closed 8 years ago

leeand00 commented 8 years ago

If i'm going to use this as my proxy, then why aren't there any instructions for how to self-sign a certificate / become your own certificate authority for using GateSentry? That seems like a security hole in the software.

Anyway here is how to do that:

http://unix.stackexchange.com/questions/289706/images-and-stylesheets-not-loading-from-squid-due-to-a-bad-certificate - My Question on the topic
http://wiki.squid-cache.org/Features/DynamicSslCert - DynamicSslCert How to for Squid
https://jamielinux.com/docs/openssl-certificate-authority/create-the-root-pair.html#prepare-the-configuration-file - How to Become a Certificate Authority for yourself.

fifthsegment commented 8 years ago

Thanks for that. Yes, self-signed certificates are encouraged. I'll add generation instructions to the README file.

Please understand, GS is currently a one man operation, it's not possible for me to do every single thing right; the reason I shared the source here was to get more contributors to iron out bugs like these. If you're able to resolve any issues, just commit it here as well and I'd merge it into the existing code base.

leeand00 commented 8 years ago

Okay I didn't realize that. I'm just saying that it looks shady to alot of people if you don't give them instructions to do so...

fifthsegment commented 8 years ago

Sorry, super busy these days. I've added the command: https://github.com/fifthsegment/GateSentry/commit/4f1e7c8dc2effc422df6d0e3ca08810ec278aa44