Hi all,

I have installed the OpenSA/0.20 Apache/1.3.12 (Win32) mod_ssl/2.6.2
OpenSSL/0.9.5 load under NT4.  This includes the snake-oil ca and server
certs.

For HTTPS testing purposes, I have installed the snake-oil CA as a trusted
CA.  When I access my site with IE4, I'm informed via a popup dialog that
the certificate is "expired or not yet valid".  When I select the View
Certificate option, I see that the expiration date is 10/20/01 6:21:51 PM
and the effective date is 10/21/99 6:21:51 PM.  Chosing to continue, I am
able to establish the SSL session.

My problem is that I am using two test-driver programs that use the
web-access functionality of IE.  Both of these fail with "communications
error 12037", meaning the certificate date is invalid or expired.  I have no
way of overiding the certificate acceptance in these programs.

Has anyone else seen this problem?  Could it be a Y2K bug in IE4?  The
modssl document suggests building certs with a script in the root directory
of the Apache source tree, however OpenSA does not supply this script.

Any suggestions would be appreciated.

thanks
Kirk Benson
BROKAT




______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to