I have create a client certificate with .crt extension using the command
below:
openssl x509 -req -in client.csr -out client.crt \
-signkey /etc/ssl/private/ca.key -CA ca.crt \
-CAkey /etc/ssl/private/ca.key -CAcreateserial -days 365
Btw, I am running apache+modssl in OpenBSD. On the client side, I am running
IE5.
Since the apache is configured to authenticate the client (SSLVerifyClient
require), I went to Tools->Internet Options->Contents->Certificates. When I
imported the client.crt, it says successful. But it is never added in the
Personal tab window. I also tried it forcing to place it in the store, but
still, it didn't appear in the Personal tab window. Can anyone please help
me?
Another thing is, I also have a netscape 4.72 browser. But this browser
doesn't understand the client.crt I have generated. Can anyone give me the
steps on how to create a client certificate using openssl that netscape
understands.
FYI, these are all for testing. I just generated my own certificates and I
have also created by own CA. And I used sign.sh for this.
Thanks in advnace.
--
.-------------------------------------------------------.
o^o | Ronneil Camara | [EMAIL PROTECTED] |
/V\ |--------------------| +632 6354086 +63917 5326993 |
// \\ | "The only way to `----------------------------------|
/( )\ | stop a hacker is to think like one." |
^^-^^ | ...brilliant misguided youth |
`-------------------------------------------------------'
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
