Nacho,

    Sorry I misunderstood. I am not exactly familiar with IIS 4.0
requirements, but what exactly goes wrong when you select the openssl
generated certificate?  Also, please look at the file doc/openssl.txt for
info about putting an issuer alternative name and subject key identifier
extensions in your certificate.

_____________________________________
Greg Stark
Ethentica, Inc.
[EMAIL PROTECTED]
_____________________________________



----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, March 21, 2001 1:10 PM
Subject: Re: how to generate a client certificate for IIS4.0


>
>
> No! my bowser shows me the 2 certificates, the working one and the non
working
> one.
> He sends the a list of CA's whith the 2 signing CA's.
>
> And I've tried to generate a client certificate with safelayer and it
works too!
>
> the safelayer cert and the NT one share this extensions:
>
>             X509v3 Subject Key Identifier:
>
58:8B:44:AC:A6:CD:E9:70:8F:60:15:CF:2B:41:C3:B1:AD:98:94:88
>             X509v3 Issuer Alternative Name:
>                 ..http://www.ecertchile.cl
>
> and I don't know how add the "Issuer Alternative Name" to my cert.
>
> I don't know any other relevant difference in the certs or the
configuration??
>
>
> Nacho.
>
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to