On 10/11/01 01:16 PM, anil kumar sat at the `puter and typed:
> Hi All,
> 
>  I am using OpenSSL with Apache on Win32.
> OpenSSL 0.9.6, mod-ssl 2.8.2, Apache 1.3.19.
> 
> I have generated CA using openssl.
> Installed CA certificate in the server by editing
> httpd.conf
> SSLCACertificatePath confsslprivate
> SSLCACertificateFile confsslCAcert.pem.
> 
> Can any one suggest me, how to install CA certificate
> in browsers.

Ok, but first you should know that the SSLCACertificatePath and
SSLCACertificateFile directives in Apache are intended to point to a
directory and file that contain CAs your server will trust when it
does client authentication.  It doesn't need just the CA that signed
your server certificate.  And the values you assign should be full
paths.  Check out the directives online.

As for installing a cert in the browser, just put it in your servers
doc tree somewhere, and request it with the browser.  So long as you
have the mime types defined in httpd.conf, it should present the CA
cert to the browser for installation.  You will then have to decide
wether and for what purposes to trust the CA.

HTH
Lou
-- 
Louis LeBlanc       [EMAIL PROTECTED]
Fully Funded Hobbyist, KeySlapper Extrordinaire :)
http://acadia.ne.mediaone.net                 ԿԬ

QOTD:
  Silence is the only virtue he has left.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to