David García Aristegui wrote:

By the way, to distribute my certificate to a MSIE browser must be in DER format, right?

After VERY much experimentation the only hypothesis that we could substantiate is that MSIE completely ignores the mime type under which the file is downloaded, and looks only at the extension of the filename under which the file is downloaded.

We did find that with a ".der" extension it will recognize
a DER encoded certificate.  I cannot speak to the question
of if there exists an extension which will trigger recognition
of a PEM certificate.

Somewhere in the mountain of paper on my desk I have a hand
compiled listing of all the extensions that have setup
entries in the M$ types database, like .p7b (PKCS #7)
and .p12 (PKCS #12) etc but I don't remember offhand if there
was anything like a ".pem" or anything...

And, M$ could change this at any time.  And there COULD be
subtle differances between the various releases of MSIE.

--
Charles B (Ben) Cranston
mailto: [EMAIL PROTECTED]
http://www.wam.umd.edu/~zben

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to