Hi, I've been through faq's until they come out of my ears but still don't quite have the answer I need.
I am simply trying to create a certificate to use on an IIS web server, using openssl on a linux box to create it. The linux installation does not have the CA.pl scripts as far as I can tell (not my box to manage I'm afraid). I have managed to create (or I believe) 1/ root CA certificate. Generated own key and certificate. This created a key/cert file which I managed to combine into a single pfx format. 2/ server certificate signed by root CA; hwoever this is in a pem format. I cannot directly import the certificate ( as key manager backup file) under IIS 5.0; I have however successfully loaded the certificates into the MMC -> certiticate manager console. The root CA under Trusted roots; the other under Personal. However neither appear in the 'assign existing' certificate dialog box on IIS 5.0 Where am I going wrong ? How do I a) I get IIS 5.0 to import the certificates directly? (can I?) - it always reports an error about "Cannot import key ring backup file". b) otherwise install the certificates I created so that I can assign an existing cert to IIS 5.0? or c) create a CSR from IIS and sign this using openssl ? Thanks Ian ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]