[THIN] Re: CSG with 1.8?

  • From: "Brian Murphy" <bem9127@xxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Fri, 17 Jan 2003 12:32:06 -0600

Cheaper Alternatives:

How about www.freessl.com

And FAQ
<http://www.freessl.com/freeSSLfaqs.htm>

And QuickSSL from Geotrust
<https://products.geotrust.com/ssl/quickssl.do?ref=freessl>

I have had no problems with their certs.

On the client side you can create a client install CD with a custom
Install of IE6 using the Resource Kit.  Create a custom IE 6.1 with the
FreeSSL Root Certificate installed...

This will keep you from getting that annoying SSL PopUp everytime you
visit the site.



-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Alexander Danilychev
Sent: Friday, January 17, 2003 12:18 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: CSG with 1.8?



One cert per CSG/NFuse combination is definetly possible, however you
are
there for surprise, unless your users do not use firewalls.

Remapping CSG to any port different from 443 (including port 80) will
run
into clients that do have your port of choyce open. So, if you put CSG
on
port 8080 (as example), it will only work for people that have outbound
port
8080 open.

The only combination that comes close to correct implementation of one
cert
per NFuse/CSG is port 443 for NFuse and port 80 for CSG using SSL on
both
ports (yes, port 80 will support your SSL traffic). However some
firewalls
will examin the traffic accros port 80 and might not allow anything but
plain HTTP.

If desire to save money on certs is high, a better way to go is to use
private certs for CSG and deploy Java client with prepacaged public
cert. In
this case keep port 443 (obviously different IP and disabled socket
pooling).

All this makes only academic sence - IT IS NOT A GOOD IDEA TO KEEP CSG
ON
THE





>From: "TheThin" <TheThin@xxxxxxxxxxxxxxxxxxxxx>
>Reply-To: thin@xxxxxxxxxxxxx
>To: <thin@xxxxxxxxxxxxx>
>Subject: [THIN] Re: CSG with 1.8?
>Date: Fri, 17 Jan 2003 12:50:26 -0500
>
>
>Actually, I recently implemented NFuse and CSG with only one external
>IP address and one cert.  We just moved CSG to a different port and
>everything works fine.
>
>Let me know if you're interested in more details.
>
>Saved the second cert money up front and the costs of a separate IP
>address down the road.
>
>Bill
>
>-----Original Message-----
>From: Brian Murphy [mailto:bem9127@xxxxxxxxx]=20
>Posted At: Friday, January 17, 2003 11:47 AM
>Posted To: TheThin
>Conversation: [THIN] Re: CSG with 1.8?
>Subject: [THIN] Re: CSG with 1.8?
>
>
>It seems like it.
>
>I remember when I ordered my Xpe software with Subscription Advantage I

>was able to download everything I needed.
>
>Main components should be:
>
>1.  Citrix XP Box
>2.  Ticket Authority Box
>3.  Nfuse Classic Box
>4.  CSG Box
>*(You will need at least two SSL Certs)
>
>(All separate software installs)
>
>-----Original Message-----
>From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
>Behalf Of Dez
>Sent: Friday, January 17, 2003 10:00 AM
>To: thin@xxxxxxxxxxxxx
>Subject: [THIN] Re: CSG with 1.8?
>
>
>
>
>
>Doesnt CSG come as part of the XP license, not as a stand alone
>product?
>
>
>=3D=3D=3D=3D=3D=3D=3D=3D At 2003-01-17, 10:24:00 Seitz, Linden wrote: =

>=3D=3D=3D=3D=3D=3D=3D=3D
>
>
>I am scrolling thru a variety of CSG docs and am seeing conflicting
>system requirements - can CSG be implemented with a 1.8 backend?
>***********************************************
>This Weeks Sponsor: WM Software
>WMS Messenger for TSE
>Affordable Instant Messaging for Terminal Servers
>http://www.wmsoftware.com/wmsm/
>************************************************
>For Archives, to Unsubscribe, Subscribe or
>set Digest or Vacation mode use the below link
>
>http://thethin.net/citrixlist.cfm
>
>=3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D

>= =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D =3D
>
>
>
>
>
>***********************************************
>This Weeks Sponsor: WM Software
>WMS Messenger for TSE
>Affordable Instant Messaging for Terminal Servers
>http://www.wmsoftware.com/wmsm/
>************************************************
>For Archives, to Unsubscribe, Subscribe or
>set Digest or Vacation mode use the below link.
>
>http://thethin.net/citrixlist.cfm
>
>
>***********************************************=20
>This Weeks Sponsor: WM Software
>WMS Messenger for TSE
>Affordable Instant Messaging for Terminal Servers
>http://www.wmsoftware.com/wmsm/
>************************************************
>For Archives, to Unsubscribe, Subscribe or=20
>set Digest or Vacation mode use the below link.
>
>http://thethin.net/citrixlist.cfm
>***********************************************
>This Weeks Sponsor: WM Software
>WMS Messenger for TSE
>Affordable Instant Messaging for Terminal Servers
>http://www.wmsoftware.com/wmsm/
>************************************************
>For Archives, to Unsubscribe, Subscribe or
>set Digest or Vacation mode use the below link.
>
>http://thethin.net/citrixlist.cfm


_________________________________________________________________
Help STOP SPAM: Try the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail

***********************************************
This Weeks Sponsor: WM Software
WMS Messenger for TSE
Affordable Instant Messaging for Terminal Servers
http://www.wmsoftware.com/wmsm/
************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm


*********************************************** 
This Weeks Sponsor: WM Software
WMS Messenger for TSE
Affordable Instant Messaging for Terminal Servers
http://www.wmsoftware.com/wmsm/
************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts: