Hello.

I'm trying to use gLite (VOMS) proxy certificates with "CN=proxy" at the subject tail and X509v3 "Key Usage" extension to authenticate a client to a server.
Plain certificates signed by CA work well.
When I'm trying to use gLite-generated proxy certificate, the server responses "Unknown ca" (verification error 20). I use X509_STORE_set_flags(x509_store, X509_V_FLAG_ALLOW_PROXY_CERTS) for server security context.
My OpenSSL version is 0x0090807fL .

Does anybody know how to use grid proxy certificates in the right way?
Have anybody tried
http://www.openssl.org/docs/HOWTO/proxy_certificates.txt
to use gLite proxies?

Thank you.
Vladimir.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to