"Murali K. Vemuri" wrote:
> 
> hi,
> i could make a certificate in the way given by you.
> i copied the .crt and .key files into /etc/httpd/conf/ssl.crt/server.crt and
> ../ssl.key/server.key respectively and then restarted the httpd.
> after that i set the multi.crt ( i created like this instead of your suggested
> kiwi.crt) and multi.key
> paths in the httpd conf file in the /etc/httpd/conf/httpd.conf file .
> i am attaching the relevant portions of the httpd.conf file here.
> now, to test whether my certificate works or not, i typed
> openssl -x509 -noout -text -in multi.crt
> i observe that the certificate is same as was generted by me.
> but, when i open netscape and type https://yogi (it is my host name), i get the
> same old certificate
> which is "snake oil ' etc.........
> can some one tell me how i can get rid of that "snake oil" certificate for ever ?

Double-double-check the path leads to the correct file, i.e. do:

openssl -x509 -noout -text -in /etc/httpd/conf/ssl.crt/multi.crt

If this is correct then the problem must be caching in the browser.
Click on the security icon and delete any certificates you have already
accepted.

> is there any documentation available out there?

http://www.modssl.org/ and click on "Documents"...

Rgds,

Owen Boyle.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to