Re: common name for https certificates in embedded devices

2006-11-17 Thread Clem Taylor
Hi, Firefox seems to accept the subjectAltName extension, but I'm having troubles getting firefox to trust the additional level of certificate hierarchy. I started out with something that looks like: Root CA cert (self signed) [added to trust store on browser] Device CA cert (signed by Root CA

common name for https certificates in embedded devices

2006-11-14 Thread Clem Taylor
Hi, I'm working on an embedded device that makes heavy use of SSL. The primary use of SSL is for authentication, users need to make sure that they are talking to the correct device. As a result, each device has a few SSL certificates that are created, signed and written to the device during manuf

Re: Adding CA cert to firefox results in 'SSL alert number 42: bad certificate' from httpd?

2006-11-06 Thread Clem Taylor
It might be the 2048 bit DSA cert it doesn't like. Try with a 1024 bit DSA key or a 2048 bit RSA key. Yup, that seems to be the problem, it didn't like 2048 bit DSA keys. It is happy with 1024 bit DSA keys and 2048 bit RSA keys. I'm creating the certs for an embedded security device that could

Adding CA cert to firefox results in 'SSL alert number 42: bad certificate' from httpd?

2006-11-03 Thread Clem Taylor
Hi, I am trying to add a self signed root certificate to Firefox (1.5.0.7) that was generated with openssl and is connecting to an openssl 0.9.7e based httpd (acme mini_httpd). The certificate was created with openssl 0.9.8a. I can connect to the httpd just fine with firefox, but when I add the