Hello.
I'm trying to use gLite (VOMS) proxy certificates with "CN=proxy" at the
subject tail and X509v3 "Key Usage" extension to authenticate a client
to a server.
Plain certificates signed by CA work well.
When I'm trying to use gLite-generated proxy certificate, the server
responses "Unknown ca" (verification error 20).
I use X509_STORE_set_flags(x509_store, X509_V_FLAG_ALLOW_PROXY_CERTS)
for server security context.
My OpenSSL version is 0x0090807fL .
Does anybody know how to use grid proxy certificates in the right way?
Have anybody tried
http://www.openssl.org/docs/HOWTO/proxy_certificates.txt
to use gLite proxies?
Thank you.
Vladimir.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager [EMAIL PROTECTED]