Holger,
> > Here, server cert:
> >
> > > > Validity
> > > > Not Before: Jul 13 14:36:12 1999 GMT
> > > > Not After : Jul 12 14:36:12 2000 GMT
> >
> > But the problem is solved. But don't ask me how I have done it :-)))
> > (maybe the -msie_hack option to ca program)
>
> I guess the problem has been solved overnight ;-)
> It could be possible that MSIE didn'T realized
> yesterday that "Jul 13 14:36:12 1999 GMT" is past.
> But today, Jul 14th, MSIE knows for sure this cert
> entered it's own validity period ;-)
>
> No, I'm not kidding, some reports have shown, this
> is reality.
This is true, I'm afraid. There are a couple of different browsers
(some Netscape browsers are vulnerable as well) that do not accept
certificates as valid on the very same day as the validity period
of the cert starts.
Mad but true.
Cheers,
Stefan.
______________________________________________________________________________
Stefan Kelm PGP key: "finger [EMAIL PROTECTED]" or via key server
DFN-PCA <[EMAIL PROTECTED]>
Vogt-Koelln-Str. 30 http://www.pca.dfn.de/~kelm/
22527 Hamburg (Germany) Tel: +49 40 428 83-2262 / Fax: -2241
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]