Hello, I am having trouble generating certificates for Mozilla 0.9.9 and Netscape 6.x. The command that I use for Netscape 4.x cert generation is below:
openssl ca -key jwilkat25 -spkac $DIR/req.raw \ -config ca.config \ -out c:/progra~1/apache~1/apache/htdocs/$CERT.cert where $DIR is the directory where the SPKAC file is sitting and ca.config is below: [ ca ] default_ca = default_CA [ default_CA ] dir = . certs = \$dir new_certs_dir = \$dir/ca.db.certs database = \$dir/ca.db.index serial = \$dir/ca.db.serial RANDFILE = \$dir/random-bits certificate = \$dir/ca.crt private_key = \$dir/ca.key default_crl_days = 30 default_md = md5 preserve = yes x509_extensions = user_cert policy = policy_anything [ policy_anything ] organizationName = supplied organizationalUnitName = supplied commonName = supplied emailAddress = supplied [ user_cert ] #SUNetID = 3:yeak subjectAltName = email:copy basicConstraints = critical,CA:false authorityKeyIdentifier = keyid:always extendedKeyUsage = clientAuth,emailProtection This command successfully generates certificates for Netscape 4.x, but does not work for Mozilla and Netscape 6. Does anyone know of anything that needs to be changed to get it to work for Mozilla and Netscape 6? Does everything stay the same with using the KEYGEN tag, the SPKAC file, etc.? I am stuck, thanks for your help. Alissa ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
