Hello,
I recently installed and configured SSLeay-0.8.0, and now, I can issue
new certificates signed by my own CA. The certificate is loaded into the
Netscape Communicator using a cgi as described in some documents.
I can load, as well, the certificate of the CA and trust in it. I know
this works with apache-ssl (once I trust in my CA, automaticaly the
browser trust in the certifacte of the web server).
The problem occurs when I try to send mail signed with my personal
certificate created by SSLeay. The netscape browser says something like
'Operation not permited with this certificate'. (I'm not sure of the
exact message in english because my browser is the espanish version).
Here comes the information of my certificate:
issuer :/C=ES/ST=Barcelona/L=Barcelona/O=Cast-Info/OU=Sistemes
Informatics/CN=Au
toritat [EMAIL PROTECTED]
subject:/C=ES/ST=Barcelona/O=Cast-Info/OU=Sistemes
Informatics/CN=Administracio
de Sistemes [EMAIL PROTECTED]
serial :04
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=ES, ST=Barcelona, L=Barcelona, O=Cast-Info,
OU=Sistemes Informatics, CN=Autoritat
[EMAIL PROTECTED]
Validity
Not Before: Mar 11 12:32:53 1998 GMT
Not After : Mar 11 12:32:53 1999 GMT
Subject: C=ES, ST=Barcelona, O=Cast-Info, OU=Sistemes
Informatics, CN=Administracio de Sistemes
[EMAIL PROTECTED]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (512 bit)
Modulus (512 bit):
00:cc:5e:5f:05:b9:90:7d:8d:07:4d:f0:e4:86:bc:
c5:a8:2a:27:d0:fc:36:93:fb:04:10:94:07:54:7f:
c4:a8:fc:44:ca:f4:a3:ba:75:24:f5:21:73:e9:40:
b4:cb:d4:f9:fc:4b:63:8d:fe:a3:12:0b:2a:bd:6b:
e5:63:e7:a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
Netscape CA Revocation Url:
http://www.cryptsoft.com/ca-crl.pem
Netscape Comment:
Funcionament en proves.
Netscape Cert Type:
0x40
Signature Algorithm: md5WithRSAEncryption
83:4b:8e:70:37:c0:e7:1f:a4:6a:8f:47:72:68:b1:13:ee:f5:
d0:4a:0a:c6:d5:89:1e:83:a5:1f:7a:83:3e:9f:f7:aa:78:77:
b5:e3:cf:4f:03:cc:ab:03:e5:09:19:79:73:e7:ed:33:f8:97:
89:bd:b5:9a:87:f6:54:47:93:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
If anyone find why this does not work or have any comments, please reply
to the list.
Thanks to all
begin: vcard
fn: Administracio de sistemes (Cast-Info)
n: ;Administracio de sistemes (Cast-Info)
org: Cast-Info
adr: Tuset, 23 1�;;;Barcelona;Barcelona;08006;Espanya
email;internet: [EMAIL PROTECTED]
title: Administracio de sistemes
tel;work: 34 (9)3 4140772
tel;fax: 34 (9)3 4145131
x-mozilla-cpt: ;0
x-mozilla-html: TRUE
version: 2.1
end: vcard
