On Mon, Mar 03, 2008 at 06:31:47PM +0300, Vladimir Voznesensky wrote: > Hello. > > I'm trying to use gLite (VOMS) proxy certificates with "CN=proxy" at the > subject tail and X509v3 "Key Usage" extension to authenticate a client > to a server. > Plain certificates signed by CA work well. > When I'm trying to use gLite-generated proxy certificate, the server > responses "Unknown ca" (verification error 20). > I use X509_STORE_set_flags(x509_store, X509_V_FLAG_ALLOW_PROXY_CERTS) > for server security context. > My OpenSSL version is 0x0090807fL . > > Does anybody know how to use grid proxy certificates in the right way? > Have anybody tried > http://www.openssl.org/docs/HOWTO/proxy_certificates.txt > to use gLite proxies?
What are you using to create the proxy certificate? voms-proxy-init? -Ian > Thank you. > Vladimir. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
