Hi all,
I'm working with Sun One Application Server 7
If I import a CA (a .pem file) using the web interface I can make ssl
connections using client authentication (but only if I manually import
the CA in the browser... I don't know if this is correct).

If I import the same .pem using certutil the ssl connection isn't
established, issuing this error:
SEC_ERROR_UNKNOWN_ISSUER: Peer's certificate is signed by an unknown
issuer

I use this command:
certutil -A -n myca -t CT,, -i myca.pem -d /bla/bla

I can see the CA imported with 'certutil -L -n myca' and it looks exactly
the same as when I import it through the web interface.

I tried with nss-3.6 and nss-3.9

...any idea?!

TIA

-- 
Ronin

_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto

Reply via email to