Very Computer

Hi there,

I carefully read and apply the instructions from

http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html

to create a create a self-signed CA certificate on my linux machine
(redhat 7.3,
apache-1.3.27-2, mod_ssl-2.8.12-2).

The mozilla client could store that certificate in order to reuse it
the next time the URL is visited, but with IE(6) :
* I can install the certificate with importation wizard within the
certificate store
* I can find the certificate in the certificate store but it is
mentionned that Windows don't have enough information to validate the
certificate ?
* When exiting IE and launch it again, IE could not (of course) use
that certificate ?

I could not find any information on the subject.

Any idea ?

What I've found is you have to create an actual CA certificate with
the CA.pl script included with openssl, then sign a server cert with
it.  You can then import the CA cert into your browser and after
that the browser should recognize any certs signed with it.

Hi everybody,

I have used the method described at http://ww.apache-ssl.org and it worked,
but I still have problems creating, and / or importing 'client certificates'
!

Regards

Quote:> Hi there,

> I carefully read and apply the instructions from

> http://httpd.apache.org/docs-2.0/ssl/ssl_faq.html

> to create a create a self-signed CA certificate on my linux machine
> (redhat 7.3,
> apache-1.3.27-2, mod_ssl-2.8.12-2).

> The mozilla client could store that certificate in order to reuse it
> the next time the URL is visited, but with IE(6) :
> * I can install the certificate with importation wizard within the
> certificate store
> * I can find the certificate in the certificate store but it is
> mentionned that Windows don't have enough information to validate the
> certificate ?
> * When exiting IE and launch it again, IE could not (of course) use
> that certificate ?

> I could not find any information on the subject.

> Any idea ?

If you mean client certificates from a browser, doing that complicated
and browser specific.  If you mean from some OpenSSL client app, it's
straightforward.

I indeed meant the 'browser' certificate.

Regards

Try pyca.de in that case.

Thank you for that information. I will try it next.

Marc-Olivier Bernard