I think that the problem is that you generated the Certificate with 1024 bit
of key's length, your IE5 only accept certificate with 512 bit of key's
length

You change the length of key in openssl.cnf file in the section req:

[ req ]
default_bits  = 512


Raul Gutierrez

----- Original Message -----
From: Alexander Serkin <[EMAIL PROTECTED]>
To: OpenSSL Mailing List <[EMAIL PROTECTED]>
Sent: Monday, June 28, 1999 8:05 AM
Subject: Problems installing cert on MSIE 5.0.


> Compiled and installed 0.9.3 on HP-UX 10.20 (thanks to Bodo for
> help...).
> Now i've issued personal certificate for myself, signed it with my own
> CA and imported into Netscape v4.6 on HP-UX.
> But when i try to import it into msie 5.0 i got the error "The input
> information is invalid". I did make it with the procedure described at
> http://www.drh-consultancy.demon.co.uk/pkcs12faq.html#UI :
>
> ...
> 9. Create a new certificate request with CA.sh -newreq
> 10. Sign the request with CA.sh -signreq
> 11 .Create a PKCS#12 file with:
> pkcs12 -export -in newcert.pem -inkey newreq.pem -name "MY CERTIFICATE"
> -certfile demoCA/cacert.pem -out mycert.p12
> If you are using MSIE5 then also add the maciter option to make the
> PKCS#12 file more secure.
> 12. ... With MSIE5 choose
> Tools->Internet Options->Content->Certificates->Import and follow the
> instructions in the wizard. If you haven't got the root CA added to the
> database it will be added automatically, but you need to confirm that
> you want to do this.
> ...
>
> But the file mycert.p12 cannot be imported. I feel that this is a well
> known problem, but i still can't find any tips.
>
> --
> Alexander
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to