Newbie Question SSL Apache

2005-01-12 Thread R. Markham 










Hallo,



I have a question regarding SSLCACertificateFile from
the SSL-Apache in http.conf File. I have a server certificate which is
issued by our Sub CA. My Question which Certificate must I use the Root CA or
the Sub CA Certificate. The Root CA Certificate is issued by DFN-PCA in Hamburg/Germany,
and the Sub CA is produced by our selves.



TIA



R. Markham

Re: Newbie Question SSL Apache

2005-01-12 Thread Bernhard Froehlich 
R. Markham wrote:
 

Hallo,
 

I have a question regarding SSLCACertificateFile from the SSL-Apache 
in http.conf File. I have a  server certificate which is issued by our 
Sub CA. My Question which Certificate must I use the Root CA or the 
Sub CA Certificate. The Root CA Certificate is issued by DFN-PCA in 
Hamburg/Germany, and the Sub CA is produced by our selves.

This is a question that should be best answered by the issuing CA... ;)
As far as I understand it the File pointed at by SSLCACertificateFile 
must contain both Certs, the Root-CA's and the Sub CA's since Apache 
sends the complete Certificate chain to the browser.

TIA
 

R. Markham 
Kind regards,
Ted
;)
--
PGP Public Key Information
Download complete Key from http://www.convey.de/ted/tedkey_convey.asc
Key fingerprint = 31B0 E029 BCF9 6605 DAC1  B2E1 0CC8 70F4 7AFB 8D26


smime.p7s
Description: S/MIME Cryptographic Signature

AW: Newbie Question SSL Apache

2005-01-12 Thread R. Markham 
Hi Ted,

I am rather confused which of the Variable to use. It seems to me they are
equal.
SSLCACertificateFile and SSLCertificateChainFile

Have any idea.

Regards

Richard Markham



-Ursprüngliche Nachricht-
Von: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Im Auftrag von Bernhard Froehlich
Gesendet: Mittwoch, 12. Januar 2005 11:54
An: openssl-users@openssl.org
Betreff: Re: Newbie Question SSL Apache

R. Markham wrote:

  

 Hallo,

  

 I have a question regarding SSLCACertificateFile from the SSL-Apache 
 in http.conf File. I have a  server certificate which is issued by our 
 Sub CA. My Question which Certificate must I use the Root CA or the 
 Sub CA Certificate. The Root CA Certificate is issued by DFN-PCA in 
 Hamburg/Germany, and the Sub CA is produced by our selves.

This is a question that should be best answered by the issuing CA... ;)

As far as I understand it the File pointed at by SSLCACertificateFile 
must contain both Certs, the Root-CA's and the Sub CA's since Apache 
sends the complete Certificate chain to the browser.

 TIA

  

 R. Markham 

Kind regards,
Ted
;)

-- 
PGP Public Key Information
Download complete Key from http://www.convey.de/ted/tedkey_convey.asc
Key fingerprint = 31B0 E029 BCF9 6605 DAC1  B2E1 0CC8 70F4 7AFB 8D26


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]