Web T-Rex Frequently Asked Questions (FAQ)
Last updated 27 January 2002
- Why is it called T-Rex?
The story is it stands for Tool for Really Easy key and X.509 certificate
management. Yes, it was a stretch, but really it is named for my son,
Will, who loves them.
- Why is T-Rex web-based?
Web T-Rex is web-based to allow a uniform GUI interface regardless of
client operating system. This project was originally started with a
multi-GUI toolkit, but the results were not too promising.
- Does Web T-Rex run on Microsoft Windows 9X/NT/ME/2K/XP?
Web T-Rex does do Windows. Specific host machines supported are listed on
the Help!|About Web T-Rex page. Tested
web browser clients are also listed on the same page.
- Can Web T-Rex use/process Verisign/other commercial CA
certificates?
Web T-Rex can use commercial CA certificates and can also create
Certificate Signing Requests for submission to commercial Certificate
Authorities. Use the Apache/SSLeay/OpenSSL setting if submitting to a web
site/page.
- Are certificates generated by T-Rex usable in Apache Web
Servers?
Apache Web servers using mod_ssl or Apache-SSL (or variants such as
Stronghold) do support certificates generated by Web T-Rex.
- Are certificates generated by T-Rex usable in Internet
Explorer browsers?
Yes. (More detailed answer someday).
- Are certificates generated by T-Rex usable in Netscape
browsers?
Yes. (More detailed answer someday).
- How do I create a certificate request?
Generate a Certificate Signing Request (CSR) using the Requests|Create Certificate Request action. A RSA
key pair may be created during this same action.
- How do I create a DSA certificate?
DSA certificates are not currently supported by Web T-Rex.
- How can I remove the passphrase on a RSA private key?
Firstly you should be really _really_ sure you want to do this. Leaving a
private key unencrypted is a MAJOR security risk. If you decide that you
do have to do this than use the Keys|Convert
Key Format action. Be sure to set the Output Private Key Format
to None.
Questions about Web T-Rex troubleshooting
- I cannot get my IE browser to connect when T-Rex is running
with SSL?
Two things to check. First be sure that the URL starts with
"https://". The "s" is crucial. Secondly be sure that
somewhere under Tools | Internet Options ... | Advanced the Use
SSL 3.0 checkbox is selected. Web T-Rex does NOT support SSL 2.0.
- I cannot get my IE browser to connect when T-Rex is running
with TLS?
Again there are two things to check. First be sure that the URL starts
with "https://". The "s" is crucial. Secondly be sure
that somewhere under Tools | Internet Options ... | Advanced the Use
TLS 1.0 checkbox is selected.
- I cannot get my Netscape browser to connect when T-Rex is
running SSL?
Two things to check. First be sure that the URL starts with
"https://". The "s" is crucial. Secondly be sure that
somewhere under Communicator | Tools | Security Info | Navigator
the Enable SSL (Secure Sockets Layer) v3 checkbox is selected. Web
T-Rex does NOT support SSL 2.0.
- I cannot get my Netscape browser to connect when T-Rex is
running TLS?
Netscape 4.X does not support TLS. Netscape 6.2 does support TLS. Using
Netscape 6.2 be sure that the URL starts with "https://". The
"s" is crucial. Secondly be sure that somewhere under Edit |
Preferences ... | Privacy & Security | SSL the Enable TLS
checkbox is selected.
- I cannot get my Opera browser to display the T-Rex menus?
Opera 4.X, 5.X and 6.0 do support JavaScript, which is required for menu
support. Also the browser
identification must identify the browser as Opera. Using Opera 6.0 be sure that under File
| Preferences | Multimedia | JavaScript the Enable JavaScript
checkbox is selected. Then be sure
that under File | Preferences | Network | Browser identification is
set to Identify as Opera.
- I cannot get my Opera browser to STOP animating the T-Rex
logo, and it is driving me crazy?
Opera 6.0 does seem to have a problem with this. This can be disabled, if it also drives you crazy. Using Opera 6.0 be sure that somewhere
under File | Preferences | Multimedia | Images the Enable GIF
animation checkbox is not selected.
- I cannot get my Opera browser to connect when T-Rex is
running SSL?
Using Opera 6.0, be sure that the URL starts with "https://".
The "s" is crucial. Secondly be sure that under File |
Preferences | Security | Security protocols the Enable SSL 3
checkbox is selected.
- I cannot get my Opera browser to connect when T-Rex is
running TLS?
Opera 6.0 does support TLS. Using
Opera 6.0 be sure that the URL starts with "https://". The
"s" is crucial. Secondly be sure that under File |
Preferences | Security | Security protocols the Enable TLS 1
checkbox is selected.
- Why does my browser give a warning about a mismatched
hostname?
Browsers expect the server's hostname to match the value in the commonName
(CN) field of the certificate. If it does not then you get a warning.
Other Questions
- I have another Question?
Send any other questions to trex@lymeware.com
and expect an answer within a few days. Thanks.
Copyright © 2001-2002 Lymeware Corporation, All Rights
Reserved.