Hi!
I gues there isn't anyone who is able to answer and have free time for this. Anyway
we'll dig and we'll have found the solution.
P.S. Especially my thank for Noor - only one who've answered.
We'll win! :-)
-----Original Message-----
From: Noor Haizad Mohd Said <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Date: Thu, 05 Apr 2001 16:38:32 +0800
Subject: Re: Need to sign Microsoft CA by openssl
>
> Dear Marat,
>
> I also faced a problem same as you. I want to issue CA cert by signing a request
>generated by Windows2000. I also tried to cross certify their CA certificate.Both of
>them are failed.
> The reasons that might happens are:-
>
> 1) For generating a certificate by signing W2000 request, the certificate is
>succesfully created. But, the certificate must contain CRL Distributions and CA
>Version fields. CA
> Version oid is important because it is being used as a reference in the W2000 Cert
>Services. Please refer to W2000 Certificate Services.
>
> 2) To cross certify their CA cert., the Subject Key Identifier must be retreived
>correctly. I used different engine to cross certify W2000 CA cert. It was failed.
>
> I hope this can give you some guidance. Maybe somebody can gives some answers for
>these matters.
>
> Regards,
>
> Noor Haizad
>
> "Marat S. Salimov" wrote:
>
> > Hi there!
> >
> > We have working Certification Authority based on openssl. But we plan to deploy a
>W2000 based corporate network. One of the tasks we have is to start using included
>Microsoft CA.
> > We want to keep inheritance and we want to sign new CA by openssl issued
>certificate.
> > I tryed to do this but failed every time. Maybe my hands are curve...
> > Can you give me any suggestion about "what to do" or any links about "where to
>look for".
> >
> > Thanks in advance
> >
> > Marat S. Salimov
> > ______________________________________________________________________
> > OpenSSL Project http://www.openssl.org
> > User Support Mailing List [EMAIL PROTECTED]
> > Automated List Manager [EMAIL PROTECTED]
>
> --
> Noor Haizad Mohd Said
> Senior Systems Analyst
> Digicert Sdn. Bhd.
> Lot 2-1, Enterprise 1,
> Taman Teknologi Malaysia,
> 57000 Kuala Lumpur,
> Malaysia
>
> Tel: 603-89961600
> Fax: 603-89961054
> Web: http://www.digicert.com.my
>
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
