Hi,
I've sourced a lot of info ( MS Site, NS Site, this lists archives, mod_ssl
)
on how to create certs for webservers
that will invoke MS SGC and Netscape step up but I just can't
get it to work.
I've created a root CA cert with the following:
extensions = x509v3
[ x509v3 ]
basicConstraints = CA:true,pathlen:0
nsCertType = sslCA
extendedKeyUsage = msSGC,nsSGC
and the cert for the server as follows:
extensions = x509v3
[ x509v3 ]
nsCertType = server
extendedKeyUsage = msSGC,nsSGC
Any pointers to what I'm doing wrong?
I've installed the certs on IIS 4.0 and iPlanet 4.1 and used IE5.0 (56bit)
version as a client.
Any help greatly appreciated.
Thanks, Stephen
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
