Hi Ariel,
You can't achieve what you want because the certificate you bought is
not a CA one : if you look at its extensions, you will find that the
value of the Certificate Basic Constraints extension is End Entity and
that it is set as Critical.
if the contrary was possible, then it would have been a big security
hole : you could issue valid certificates for domains without
authorization (like paypal.com) and it will enable you to mount
sophisticated man-in-the-middle attacks.
To authenticate users in your website, create you own CA, issue
certificates for them and then configure your webserver to accept only
client certificates issued by your CA.
Cheers,
--
Mounir IDRASSI
IDRIX
http://www.idrix.fr
On 10/12/2010 5:41 AM, Ariel wrote:
Hi again,
I could enable my site to use SSL with a wildcard certificate bought to
GoDaddy by concatening the "mysite.com.crt" and the "gd_bundle.crt" into a
combined one "mysite.com.combined.crt" (explained in a previous email).
Now I want to enable SSL Client certificate, creating new keypair files, new
certificate signed requests (csr) and signing them using my combined cert
file as the CA.
Is that possible? How can achieve this goal using the command line tool?
Thanks,
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [email protected]
