From: "Steven Levine" <ecs-isp@2rosenthals.com>
Message-ID: <676ba02d.13.mr2ice.fgrirsq@earthlink.net>
Date: Tue, 24 Dec 2024 22:03:25 -0800
To: "eCS ISP Mailing List" <ecs-isp@2rosenthals.com>
In-Reply-To: <list-11490310@2rosenthals.com>
Subject: Re: [eCS-ISP] Getting started with Let's Encrypt

In <list-11490310@2rosenthals.com>, on 12/19/24
   at 07:21 PM, "Peter Moylan" <ecs-isp@2rosenthals.com> said:

Hi Peter,


>You're right. I hadn't even heard of groups.io. I've just done some
>googling about it, and got as far as getting a list of all groups, but I
>couldn't find any mention of OS/2.

The list name tend to say warp, rather than OS/2

Mailing-List: list main@warp.groups.io; contact main+owner@warp.groups.io
List-Id: <main.warp.groups.io>
List-Subscribe: <mailto:main+subscribe@warp.groups.io>
List-Help: <mailto:main+help@warp.groups.io>

Mailing-List: list warp-technical@warp.groups.io; contact
warp-technical+owner@warp.groups.io List-Id:
<warp-technical.warp.groups.io> List-Subscribe:
<mailto:warp-technical+subscribe@warp.groups.io> List-Help:
<mailto:warp-technical+help@warp.groups.io>

>The problem, I guess, is that I
>stopped reading the OS/2 Usenet newsgroups a few years ago, after the
>traffic started dying.

Most of the traffic these days is on the os2world forums.  There's also
facebook, discord and bluesky groups, but I don't really have enough
unused time to monitor them.

>While rewriting the manual, I had a closer look at what I had received
>from Let's Encrypt. (It's confusing having two files called key.pem, and
>multiple files all called cert.pem, but I guess there's no way around
>that.

It just how the author chose to name things.  The folder names that
contain cert.pem and key.pem are the named after the domains.  Not a big
deal once you get used to it.

>Is this form of bundling the two standard practice?

Yes.  It's probably documented somewhere in the RFCs.  The PEM file is
just a type of container.  It can contain any number and combination of
keys and certificates and other kind of data as long as the data is
encoded according to the PEM file rules.  For example, on your OS/2 box
you should have

  \etc\pki\ca-trust\extracted\pem\tls-ca-bundle.pem

Steven

-- 
----------------------------------------------------------------------
"Steven Levine" <steve53@earthlink.net>  Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------