Hi Jan,
The other difference is, that the webserver certificate was signed by the same ca certificate as the working logon certificate. Can that be the point?? Do I need to issue a new webserver ssl certificate using openca?
You have to configure a certificate Path for the certificates you want to accept by the server. This is done by SSL* directives in the Apache config - it is possible to have differetn CAs for Server and the User-Auth.
And if yes, how can I do it? Is it possible to bring a self generated pkcs10 request into openca?
Yes - via the "server request" . you have the opertunity to upload a pkcs10 file there vie the webbrowser
Oli -- Diese Nachricht wurde digital unterschrieben oliwel's public key: http://www.oliwel.de/oliwel.crt Basiszertifikat: http://www.ldv.ei.tum.de/page72
smime.p7s
Description: S/MIME Cryptographic Signature
