Am 14.10.2010 01:58, Mounir IDRASSI schrieb: > Hi Stefan, > > The value of the Basic Constraint extension of this website self-signed > certificate is "End Entity" and, more importantly, it is set to > Critical. So, technically speaking, this certificate can not be a CA and > it can't certify itself. > The Nokia implementation seems to be strict compared with others but it > can't be blamed for checking the correctness of a certificate. > The administrators of this website can solve this issue by creating a > new certificate without the Basic Constraint extension. A more clean > solution would be to a have the server's certificate issued by a root CA > of their own, like in any normal PKI architecture.
Thank you for the informations. Stefan -- Stefan Bauer ----------------------------------------- PGP: 36D1 1570 DCAD B767 EABE F60D 6BCA 7AD4 79EB C4EC -------- plzk.de - Linux - because it works ---------- ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
