I am trying to figure out how to import client certificates into both
browsers, and have things working fine for Netscape.  In IE though there
are problems.

I have taken bits and pieces from:
http://www.camb.opengroup.org/%7Efjh/Papers/cook/ssl_msclient_certs.html
and the help files distributed by MS with the xenroll control.  So far I
have gotten the initial request to occur and be sent, and I believe all
the processing is going on properly on the CA side, but sending it back
and registering it within IE is proving to be a problem.  When I send it
back I get an '80092009' error to which MS gives the following
'description':

ErrorCode/Message --- 80092009: 
The software publishing certificate and private key do not match or 
do not contain valid information.

Reason:
Software publishing certificate (.spc file) corrupt

Solution:
Obtain and use a valid software publishing certificate (.spc file)

I assume that a .spc file is something created by the MS certificate
generation program...What is it?

What I am trying to achieve is nothing extraordinary, just to get the
requests coming in and the signing process to be automated for these
browsers.  I am more than willing to share my solutions and things (once I
get them together) anyone else working through this right now?

I am using OpenSSL 0.9.2b, mod_ssl 2.2.6 (which is working GREAT), and
rsaref 2.0.

Thanks for any help, commiseration, or anecdotes,

Simon  ;)
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to