Hi,

How does MOD_SSL call OpenSSL for the purpose of Certificate Verification? I have a certificate which has the critical extension 'Name Constraints', when I parse the cert with OpenSSL 0.9.8(b) it seems OpenSSL understands the Certificate, however, when I present the cert to Apache, it fails with the Error Message 'Unhandled Critical Extensions'

THis leads me to believe MOD_SSL calls OpenSSL in a different manner. Has anyone any experience of this?


Diarmuid

Reply via email to