MSIE 5.0 certificate lacks of information.

[Erik Heim]

Hi !

My self signed SSL-Server certificate works ok with Netscape but
MSIE 5.0 says following about the certificate :

"This certificate cannot be verified due to a lack of information"

I make the fertificate with "make certificate TYPE=custom"

This will produce 4 files : ca.crt, server.key, server.crt and server.csr

The files server.key and server.crt are used by apache

Why does the server.crt not work with MSIE 5.0 and what can I do?

I think it's not the problem of the X509v3 extensions, because I
can import an self signed certificate into MSIE 5.0 from the site
www.softcarrier.de which
do not contain any X509v3 extensions !

Thanks, Erik

The server.crt in clear text is :

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=DE, ST=Hamburg, L=Hamburg, O=Test, OU=Certificate CA,
[EMAIL PROTECTED]
        Validity
            Not Before: Aug 12 12:19:42 1999 GMT
            Not After : Aug 11 12:19:42 2000 GMT
        Subject: C=DE, ST=Hamburg, L=Hamburg, O=Test, OU=Certificate,
[EMAIL PROTECTED]
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:fd:58:fa:c6:a6:c3:13:71:80:b3:73:7d:a8:31:
                    2b:0a:2c:4d:82:bd:6d:aa:a9:12:a0:36:64:1f:80:
                    10:3f:c0:b1:ea:4a:56:e2:b4:3f:ab:95:4e:25:c2:
                    99:7e:f8:90:8c:17:44:71:12:41:fa:3d:9e:b8:6e:
                    35:b1:2e:3b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Alternative Name:
                email:[EMAIL PROTECTED]
            Netscape Comment:
                mod_ssl generated custom server certificate
            Netscape Cert Type:
                SSL Server
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage:
                Certificate Sign, CRL Sign
    Signature Algorithm: md5WithRSAEncryption
        9c:49:8f:7d:a6:ae:5f:ec:39:8a:9f:bf:b4:c1:c8:ba:6d:55:
        96:36:b6:50:76:67:97:3d:c7:4b:b8:b6:d7:3b:c2:09:6b:5d:
        2c:f6:95:7a:f8:54:8c:f3:d8:80:fa:fd:41:2b:2e:be:59:4d:
        5a:f2:23:fc:66:ef:cb:7d:9e:dc


I use apache 1.3.6 + mod_ssl-2.3.6-1.3.6 + openssl-0.9.3a


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]