[ssl-users] Problems using the cgi ms_key.pl for microsoft clients certificate requests

["David Guerrero (PFC-Fernando)"]

Hi! The problems that I had with the Perl cgi to process Netscape client certificate 
request have been solved. Thanks to the ssl-users list!!
   the problem was that the CA key was "secret ca" and then I put:
 (in the cgi perl script)
      $CAPASS ="secret ca"

but at the end I have discovered that I had to put:
      $CAPASS ="\"secret ca\""

  
  
    Now! I'm doing the same to process Microsoft client certificate request.
  The browser is Microsoft internet explorer.
     I think I'm doing correct things but I have an error in the html page, in 
the function GenReq():
      
       function GenReq ()
         {
              sessionId = "xx" + Math.round(random() * 1000);

 ***----->>>> sz10 = certHelper.GenerateKeyPair(sessionId, reqHardware, szName,
                                               0, szPurpose, doAcceptanceUINow, 
                                               doOnline, keySpec, "", "", 1);

             /*
              *
              * The condition sz10 being empty occurs on any condition in which the
              * credential was not successfully generated. In particular, it occurs
              * when the operation was cancelled by the user, as well as additional
              * errors. A cancel is distinguished from other unsuccessful
                 * generations by an empty sz10 and an error value of zero.
              *
              */

             if (sz10 != "")
             {
                 document.GenReqForm.reqEntry.value = sz10;
              document.GenReqForm.sessionId.value = sessionId;
             } else {
                    alert("Key Pair Generation failed");
                    return false;
             }
         }

      

**** the  errror is where is marked!

 any suggestions?
  thank in advanced


+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+