I was reading an article on creating a certificate authority, and came up with this question when I came to the section entitled "Distribute your certificates and CRL".
- I am deploying an application to a private network, but I still need to use SSL for some of the authentication mechanisms. I was thinking that an SSL cert from a standard CA would not work since there is no outside access from within the network, and therefore no way to verify the cert in some way (if verification occurs at all).
- Service clients would be connecting a variety of ways... browsers, java, .Net, etc... I'd hate to degrade the utility of SSL by turning off features, but I'll keep that as an option.
- If verification does occur, I think I'll need to deploy my own certificate authority (I realize this would involve distributing a root certificate to all the clients, it's not ideal, but it should be acceptable), but I can't seem to find any information on a "verification provider".