Hi,

I've been experimenting a bit with signing a certificate request with my
key/cert combination that was issued/certified by Equifax Secure (which is
certified by Thawte). I added my certified certificate to the
SSLCACertificate and SSLCertificateChain files. This works fine in MSIE and
Opera browsers.
When I view the chain in MSIE I see:

Thawte->Equifax Secure->www.yournic.com (my certified
certificate)->www.nlfactory.com

In Netscape browsers however I get a warning that the browser does not
recognise the signing authority. This probably means that Netscape does not
work correctly with Chained CAs.
Is this correct or am I doing something wrong ?

The urls to try out:

https://www.yournic.com (no warning in Netscape)
https://www.nlfactory.com (warning in Netscape

Thanks,

Taco Scargo

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to