Hi!
Do anyone have worked with the Verisign StepUp/Bank/128-enabeling
certificates and OpenSSL/SSLeay?
Verisign use what they call a "INTERMEDIATE_CA_CERTIFICATE"
(server cert chain) that signes the "server certificate".
The "INTERMEDIATE_CA_CERTIFICATE" are signed by the
"VSign Class 3 Public Primary Certification"
(included in the OpenSSL: {SRC-PATH}/certs/vsign3.pem
------------------------------------------------------------
vsign3.pem ===sign===> Intermediate ===sign===> server cert
------------------------------------------------------------
Have anyone succeded in doing this???!
Verisign says that this will only work with:
--------------------------------------------
on one of the following types of server software,
all of which support chained certificates:
*Microsoft IIS 3.0 or 4.0, on NT 4.0 Service Pack 3.0, with upgrade
patch
*Domestic Version of Netscape Enterprise, Proxy, or Admin Server 3.0+,
or
Netscape 2.01c
*Lotus Domino 4.6.2 or later
*Nanoteq Netseq server NetSeq Secure with Virtual Server Module Enabled
*HP Virtual Vault w/Netscape Enterprise 3.0 Domestic Version, or
Netscape
2.01c
*Compaq/Tandem iTP Webserver
================================================================
================================================================
Top CA cert (vsign3.pem)
------------------------
subject=/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification
INTERMEDIATE_CA_CERTIFICATE
---------------------------
Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification
Authority
Subject: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign
International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by
Ref. LIABILITY LTD.(c)97 VeriSign
--
P�r Ahr�n, Celo communication AB, Mobile: +46 708 97 74 71
[EMAIL PROTECTED], http://www.celocom.se/pera
PGP 5.0i-Fingerprint: 7CB0 648F ABCE 9431 1F9E 41E1 30BF 78B9 6309 7850
begin:vcard n:Ahren;Per tel;cell:+46 8 708 97 74 71 tel;fax:+46 8 736 61 70 tel;work:+46 8 457 08 04 x-mozilla-html:FALSE url:http://www.celocom.com org:<A HREF="http://www.celocom.com">Celo Communications</A><br><img src="http://www.celocom.com/images/celologo_small.jpg">;System Integration adr:;;Sveav�gen 166, 16tr;Stockholm;;104 35 Stockholm;Sweden version:2.1 email;internet:[EMAIL PROTECTED] title:Technical consultant x-mozilla-cpt:;2816 fn:Per Ahren end:vcard
S/MIME Cryptographic Signature
