Hmmm... thanks, that would make sense - it is just the client-enabled
directory that doesn't work.
But I'm already using the same ca-bundle.crt file on both machines!

Grrrrrr!

-----Original Message-----
From: Eckard Wille [mailto:[EMAIL PROTECTED]]
Sent: Friday, June 01, 2001 4:25 PM
To: [EMAIL PROTECTED]
Subject: Re: certificate signature failure


[EMAIL PROTECTED] schrieb:
> 
> When I try to connect (using IE5) I am asked which personal certificate
I'd
> like to use, but then I get "Page cannot be displayed" with the following
in
> the error log: ...

Do the other parts of the SSL-enabled host fine? If only the
client-enabled directory does not work, then maybe your
SSLCACertificateFile does not contain the issuer of your client cert.
Try to use the ca-bundle.crt from the newer distribution within your
old server if the included CAs differ.

# httpd.conf of old server
# SSLCACertificateFile /path/to/my/ca-bundle.crt
SSLCACertificateFile /path/to/my/newer-distrib-ca-bundle.crt

Eckard
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to