hello group

i have generated client certificates using openssl. i instaalled
certficates in the microsoft internet explorer. I configured the apache
webserver to authenitcate the client. When i install openssl client
certificates, i can view then in tools->Internet options->content
tab->certificates->personal tab. The Advanted option shows the certificate
was selected for client authtentication. During https connection to apache
webserver "CLIENT AUTHENTICATION" windows does not show the certificate.
Can anyone please tell me why i cannot view the self generated certificate
in the client authentication window?

attached is my shell script for generating client certificates

        echo "genererating user PKI certificate"
        openssl req -nodes -new -x509 -keyout pkireq.pem -out pkireq.pem
-days 365 -config openssl.cnf
        openssl x509 -x509toreq -in pkireq.pem -signkey pkireq.pem -out
tmp0.pem
        openssl ca -config openssl.cnf -policy policy_anything -out
pkicert.pem -infiles tmp0.pem
        mv pkireq.pem my-key.pem
        mv pkicert.pem my-cert.pem
        openssl pkcs12 -export -chain -CAfile [./cacert.pem]  -in
my-cert.pem -inkey my-key.pem -out browser-my-cert.p12
        echo "...done"

cacert is ca file genereated using openssl

i installed browser-my-cert.p12 in internet explorer but cannot view it
during client authentication phase of the SSL/TLS


Thanks
ganesh


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to