next up previous contents
Next: New Personal Certificate receiving Up: Visible Changes Previous: Certificates Signed by Untrusted

New Personal Certificate generation process

When a form with a KEYGEN tag is submitted, the user will be presented with a screen describing what is about to happen and the importance of protecting the private key and certificate. The user will also prompted for random keystroke input (á la PGP) to obtain some random bits to be used in key generation.gif When that's complete, a key-pair is generated. The user will be prompted for a passphrase (which may be null) with which he should protect his private key. The public key information is then submitted, along with the form.

The following screens will be presented.

                                        Lynx Certificate Request

        You are requesting a new personal certificate.

lynx is about to generate a 1024-bit RSA key for you. This will be
used along with the certificate you are requesting to identify you to
sites which recognize this certificate authority. Your private key
never leaves your computer and can be protected a password.

When you press the OK button, lynx will generate your key. This may
take a while.

                       [Cancel] [OK]

(Of course, ``1024'' will be replaced with whatever the actual size is.)

Key Generation complete!

It is highly recommended that you use a passphrase to protect your
private key. If you wish to protect your private key with a passphrase,
please enter it here:

  Passpharse: ____________________________________
     Confirm: ____________________________________

    [SUBMIT]



Team Athena