I am having problems importing certificates into Netscape running on
Windows, eventhough the certificate is will import fine with the same
version of Netscape running on X. Any ideas? (Actually it doesn't import
into IE either, but I figure one problem at a time)
Currently I have nsCertType commented out in openssl.cnf, but I don't see
how that can alter the ability to import between OSes.
Anyway all the vital information I can give:
FreeBSD 3.1, Netscape 4.51, OpenSSL 0.9.2b, pkcs12 0.53b
Windows 95 4.00.950 B, Netscape 4.51
I'm also using this CA to issue server certs and there are no problems
with those on any configuration yet tested.
Thanks for any help,
Simon
Example Cert:
issuer :/C=CA/ST=Ontario/L=North York/O=Leitch Technology International
Inc./OU=
Information Systems/CN=InnSite [EMAIL PROTECTED]
subject:/C=CA/ST=Ontario/L=Toronto/O=Leitch Technology International
Inc./OU=Dea
ler InnSite/CN=1017:Simon de
Boer:221500,170500,[EMAIL PROTECTED]
.com
serial :05
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=CA, ST=Ontario, L=North York, O=Leitch Technology
Internationa
l Inc., OU=Information Systems, CN=InnSite
[EMAIL PROTECTED]
Validity
Not Before: Apr 19 19:53:50 1999 GMT
Not After : Apr 18 19:53:50 2000 GMT
Subject: C=CA, ST=Ontario, L=Toronto, O=Leitch Technology
International
Inc., OU=Dealer InnSite, CN=1017:Simon de
Boer:221500,170500,468800/Email=sdeboe
[EMAIL PROTECTED]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (1024 bit)
Modulus (1024 bit):
00:bf:26:a4:ef:51:e6:df:64:07:01:9b:a8:ea:6f:
12:23:8a:f8:3f:58:95:02:d7:fc:8f:b8:26:a3:86:
3c:f5:2b:de:54:4e:b8:88:9c:d1:45:d2:c3:14:40:
b4:9b:8e:09:b9:3c:27:7b:3f:29:1d:75:74:a3:06:
23:f7:dd:f8:79:1b:8a:68:ab:9c:8a:5f:95:5f:dd:
84:cc:34:3d:46:39:25:e1:d1:2e:b2:12:00:75:66:
48:05:e4:a5:16:c1:fd:b6:75:b2:2c:30:37:bc:f5:
e1:0d:8f:3d:f1:04:e5:9b:7a:b9:df:c2:42:2e:4e:
01:fd:ea:f7:30:7a:ce:51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Key Usage:
Digital Signature, Non Repudiation, Key Encipherment
Netscape Comment:
X509v3 Subject Key Identifier:
3F:82:85:C9:89:BB:73:51:78:6D:D6:62:A7:FE:05:CF:52:6E:27:73
X509v3 Authority Key Identifier:
keyid:8F:E2:AF:C8:A0:23:31:9E:49:CF:CD:DA:C3:89:61:13:78:92:F0:F
6, DirName:/C=CA/ST=Ontario/L=North York/O=Leitch Technology International
Inc./
OU=Information Systems/CN=InnSite [EMAIL PROTECTED],
serial:00
X509v3 Subject Alternative Name:
email:[EMAIL PROTECTED]
X509v3 Issuer Alternative Name:
email:[EMAIL PROTECTED]
Signature Algorithm: md5WithRSAEncryption
4e:44:53:f2:4f:07:71:98:a4:d7:e9:51:8b:20:9a:ae:98:1e:
7a:d4:bb:2c:cd:fa:54:9d:fc:02:3d:f2:e1:95:d0:a3:58:9e:
6d:73:f2:56:c4:1c:76:80:46:c0:72:57:10:8b:4c:26:68:da:
f9:cf:f7:9b:34:38:6b:01:63:47:c8:1d:c4:ab:4b:fe:a2:ea:
2f:2b:69:a7:c3:e7:97:e8:c3:9a:14:e1:a8:c4:40:23:02:98:
00:d6:8f:cd:a8:60:a7:72:1d:5c:c9:3c:fa:62:3f:29:81:63:
40:5b:e8:51:30:c1:b1:14:0c:f3:6d:1e:b4:48:cf:9e:ed:58:
85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
