<a href="http://boblord.livejournal.com/18402.html">http://boblord.livejournal.com/18402.html</a>  <div class="gmail_quote">On Tue, Feb 10, 2009 at 1:20 PM, Martin Langhoff <<a href="mailto:martin.langhoff@gmail.com">martin.langhoff@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">On Wed, Feb 11, 2009 at 4:57 AM, Simon Schampijer <<a href="mailto:simon@schampijer.de">simon@schampijer.de</a>> wrote: >> Thoughts? Opinions? Code? >> >> cheers, > > I wonder if it would not be best to generate a cert per user when we > authenticate the first time with the XS and add this then to the cert8.db in > the profile. This works fine - rainbow wise - as we do this already for the > OLPC - Root CA. How do we  - get the cert of the XS ahead of time and mark it as trusted to avoid the "self-signed cert bad!" screen?  - give the XS our cert so it knows who we are? see the 'Plan A'  (in my opening post) for further notes. m --  <a href="mailto:martin.langhoff@gmail.com">martin.langhoff@gmail.com</a>  <a href="mailto:martin@laptop.org">martin@laptop.org</a> -- School Server Architect  - ask interesting questions  - don't get distracted with shiny stuff  - working code first  - <a href="http://wiki.laptop.org/go/User:Martinlanghoff" target="_blank">http://wiki.laptop.org/go/User:Martinlanghoff</a> _______________________________________________ Sugar-devel mailing list <a href="mailto:Sugar-devel@lists.sugarlabs.org">Sugar-devel@lists.sugarlabs.org</a> <a href="http://lists.sugarlabs.org/listinfo/sugar-devel" target="_blank">http://lists.sugarlabs.org/listinfo/sugar-devel</a> </blockquote></div> -- "It is difficult to get a man to understand something, when his salary depends upon his not understanding it." -- Upton Sinclair