Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

My company has grown to the point where we're interested in being an intermediate CA for our customers, and would like to issue certificates to customers. Among other uses, we wish to issue SSL certificates that are trusted by the average web surfer's browser.

My question is quite similar to this one, but I'm skeptical of the "You don't" answer. You must be able to, given the time and money -- others do it. We have both, and would like to know how to proceed.

share|improve this question
1  
I'm sure if you presented enough money in front of a CA, I'm sure they would do it. Which raises many morale and security issues, but lets save that for another post. –  Nathan Adams Nov 7 '09 at 6:29

2 Answers 2

up vote 3 down vote accepted

If you are willing to pay enough, a CA will sell you a self-service infrastructure where you will be able to sign your csr's yourself without any checking by them. You will still have to pay per cert, probably the same as everyone else.

see i.e. http://www.verisign.com/ssl/buy-ssl-certificates/managed-pki/index.html

I guess all other CAs have something similar.

Good luck with becoming a CA included in common browsers, see what happened to cacert.org: https://bugzilla.mozilla.org/show%5Fbug.cgi?id=215243

share|improve this answer

Basically you have to convince one of the existing CA that they can trust you not give out bad certificates.

You probably going to need to directly contact a few of the CAs and ask. I don't believe this is a common enough request that you are going to find lots of information.

A more likely scenario is that existing CAs might will want to offer you a reseller arrangement where you forward the requests to them.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.