There's several guides for getting certs into the client (Netscape or IE). Check out the relevant sections at: http://www.ultranet.com/~fhirsch/Papers/cook/ssl_cook.html (There's probably more updated ones, but the above worked for me.) Once the user cert AND associated CA cert are in the Netscape browser, Crypto.signText() should work. Make sure that Netscape can verify the certs in question via the Security->Certificates->Yours->verify window (for user) and Security->Certificates->Signers->verify (for CA). Rick Kervin Pierre wrote: > hi, > > I don't have an answer to your question. Sorry. But I have a question > of my own. > > > and imported it into netscape successfully. > > How did you import the ticket into netscape? Must the ticket be > PKCS12? I've been trying to generate a ticket and importing it into > netscape as a CA ticket but I can't find how to do this. > > Any info will be appreciated. > > thanks, > Kervin > > > then i want this certificate to sign form, which > > is implemented by: > > i programmed a html file, want to use the certificate > > to sign a form, the file is as below: > > > > <html> > > <head> > > <SCRIPT LANGUAGE="javascript1.2"> > > function signForm( theForm, theWindow) { > > > > theForm.ice.value = theWindow.crypto.signText("hello","ask"); > > theForm.zeyi.value = theForm.ice.value.length; > > } > > </SCRIPT> > > </head> > > <body> > > <form> > > <input type=text name=zeyi> > > ="push me" onClick > > ="signForm(this.form,window)"> > > </body> > > </html> > > > > but the function signText always failed by returning a error of > > "error:internal error". i applied a test cert at www.thawte.com > > and imported it into the netscape, this time it can sign successfully. > > i don't know why, does the openssl can't work with netscape' signtext > > function? my netscape is 4.61, and openssl is 0.9.5a. > > > > please help me! thanks a lot! > > > > sincerely, > > ice and zeyi > > > > the atachments is the certificate i imported into netscape, > > ice.p12 --- produced by openssl, and signText() can't work > > zeyi.p12--- produced by thawte.com, signText() can sign successfully. > > > > (See attached file: Ice.p12)(See attached file: zeyi.p12) > > (See attached file: Ice.p12) > > (See attached file: zeyi.p12) > > > > ------------------------------------------------------------------------ > > Name: Ice.p12 > > Ice.p12 Type: unspecified type (application/octet-stream) > > Encoding: base64 > > > > Name: zeyi.p12 > > zeyi.p12 Type: unspecified type (application/octet-stream) > > Encoding: base64 > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]