Generated Intermediate CA key:
openssl genrsa -out ia.key 4096 Generated Intermediate CA Certificate Request: openssl req -new -key ia.key -out ia.csr Processed Intermediate CA request and signed by the CA:openssl x509 -req -days 1825 -in ia.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out ia.crt
Concatenate the CA and the intermediate CA certificates together: Root cert: cat ca.crt > cachain.pem Int-ca cert: cat int-ca.crt >> cachain.pem On 11/19/2012 1:41 PM, Erwann Abalea wrote:
Thanks.The first certificate is your root CA, the second one is a version 1 certificate that can't be used as a CA (it would be insecure to allow it). If your end-user certificate is issued by this second certificate, then the error message is normal.
-- Deeztek.com Support http://www.deeztek.com
smime.p7s
Description: S/MIME Cryptographic Signature