RE: Firefox unhappy with my self signed Cert

2012-10-16 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole >Sent: Friday, 12 October, 2012 11:51 >As some additional info, I am suspecting this may be an issue with my config file. >I am using the same config file I used to set up my certificate authority, >which has under [ req ] a

Re: Firefox unhappy with my self signed Cert

2012-10-15 Thread Derek Cole
As some additional info, I am suspecting this may be an issue with my config file. I am using the same config file I used to set up my certificate authority, which has under [ req ] a couple of values plugged in - for one, prompt=no, because I didnt want it to prompt me for values. It also has a v

RE: Firefox unhappy with my self signed Cert

2012-10-14 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole >Sent: Friday, 12 October, 2012 17:06 >Interesting. While I was playing around with this, I actually >noticed that if I use the -subj option on the CSR, I am not able >to do this. I was able to get it working by adding the common nam

Re: Firefox unhappy with my self signed Cert

2012-10-12 Thread Derek Cole
Interesting. While I was playing around with this, I actually noticed that if I use the -subj option on the CSR, I am not able to do this. I was able to get it working by adding the common name on the actual cert generation from that CSR. The config file was modified so that for my priority_match,

RE: Firefox unhappy with my self signed Cert

2012-10-12 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole >Sent: Friday, 12 October, 2012 11:22 >So I think you were right. I used a command to view the CSR >that I generated with the following: >openssl req -new -nodes -subj "/CN=www.myserver.com" -out /tmp/file.csr >-keyout /tmp/privkey.c

Re: Firefox unhappy with my self signed Cert

2012-10-12 Thread Derek Cole
So I think you were right. I used a command to view the CSR that I generated with the following: openssl req -new -nodes -subj "/CN=www.myserver.com" -out /tmp/file.csr -keyout /tmp/privkey.csr -config /my/openssl.cnf when I do this though, I noticed that my subject line, which I view with opens

Re: Firefox unhappy with my self signed Cert

2012-10-11 Thread Derek Cole
> > -Original Message- > From: owner-openssl-us...@openssl.org > [mailto:owner-openssl-us...@openssl.org] On Behalf Of Dave Thompson > Sent: Thursday, October 11, 2012 5:13 PM > To: openssl-users@openssl.org > Subject: RE: Firefox unhappy with my self signed Cert > > >

RE: Firefox unhappy with my self signed Cert

2012-10-11 Thread Charles Mills
11, 2012 5:13 PM To: openssl-users@openssl.org Subject: RE: Firefox unhappy with my self signed Cert >From: owner-openssl-us...@openssl.org On Behalf Of Charles Mills >Sent: Thursday, 11 October, 2012 19:40 Some minor points: >How do you specify the name (URL) of the Web site in Firefox?

RE: Firefox unhappy with my self signed Cert

2012-10-11 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Charles Mills >Sent: Thursday, 11 October, 2012 19:40 Some minor points: >How do you specify the name (URL) of the Web site in Firefox? >Do you use exactly the same name as you use with the test client >(and the name in the certificate)? OP's

RE: Firefox unhappy with my self signed Cert

2012-10-11 Thread Dave Thompson
>From: owner-openssl-us...@openssl.org On Behalf Of Derek Cole >Sent: Thursday, 11 October, 2012 19:03 >i have a server that is running a custom app that can accept >a SSL connection. I generate a cert on each server, that is >signed by my own CA. I tested whether this worked or not by >using t

Re: Firefox unhappy with my self signed Cert

2012-10-11 Thread Graham Leggett
On 12 Oct 2012, at 1:40 AM, "Charles Mills" wrote: > How do you specify the name (URL) of the Web site in Firefox? Do you use > exactly the same name as you use with the test client (and the name in the > certificate)? > > Firefox is saying the certificate is for myserver but you are specifyi

Re: Firefox unhappy with my self signed Cert

2012-10-11 Thread Graham Leggett
On 12 Oct 2012, at 1:03 AM, Derek Cole wrote: > I installed my_server_cert.pem as a trusted authority in firefox, however, it > still prompts that it is an "Untrusted Connection" and has the button to add > security exception. When I click this button, I noticed that under > Certificate Status

RE: Firefox unhappy with my self signed Cert

2012-10-11 Thread Charles Mills
How do you specify the name (URL) of the Web site in Firefox? Do you use exactly the same name as you use with the test client (and the name in the certificate)? Firefox is saying the certificate is for myserver but you are specifying a different name when you open the site. The name has to be