Here is my experiences with Netscape 6 and what I think is a bug in their
code/ implementation etc.

1. Created a new CA.
2. Downloaded CA into IE 5.5 and NS 6.0 : no problems
3. Created web cert and implemented into web server
    IE 5.5 and NS 6.0 both like this
4. created personal cert for client authentication
5. created the pkcs12 file  (jeff.p12)
6. imported jeff.p12 into IE 5.5  no problem
7. imported jeff.p12 into NS 6.0 problem.   NS 6.0 accepts password but
doesn't import it.

OK then

8. Exported Personal Cert from IE 5.5 into a pkcs12 file. (jeff2.p12)
9. Imported jeff2.p12 into NS 6.0:  No Problem.

10 Surfed to web page with both browsers.
    Results:  IE  No prob  asks for cert and is happy
                    NS  Prob.  Either the psm crashes or I don't have a cert
to choose

11  Download Netscape Communicator 4.76?
12 imported jeff.p12 no probs
13 surfed to site and chose cert no probs.

So:
I'm thinking that the code in Netscape 6.0 is a little buggy.  Due to the
crashes of the psm code and the refusal to import jeff.p12.   I haven't
tested jeff2.p12 in Communicator yet and I think I should just to see what
happens.

Hopefully this helps the next person that this happens to so that they can
maybe debug this further.

Has anyone else on this list experienced the same problems that I have?

Just for mention I am useing the lastest openssl 0.9.6. But not the cvs
version or anything like that.  Personally I don't think that it is really
openssl's problem althoe NS 6.0 does import the IE exported p12.

Thank you OpenSSL team for providing this excellent tool.

Jeff Ritchie


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to