Hi,

I've been through faq's until they come out of my ears but still don't quite have the 
answer I need.

I am simply trying to create a certificate to use on an IIS web server, using openssl 
on a linux box to create it. 

The linux installation does not have the CA.pl scripts as far as I can tell (not my 
box to manage I'm afraid). 

I have managed to create (or I believe) 

1/ root CA certificate. Generated own key and certificate. This created a key/cert 
file which I managed to combine into a single pfx format. 
2/ server certificate signed by root CA; hwoever this is in a pem format.


I cannot directly import the certificate ( as key manager backup file) under IIS 5.0; 

I have however successfully loaded the certificates into the MMC -> certiticate 
manager console. The root CA under Trusted roots; the other under Personal. However 
neither appear in the 'assign existing' certificate dialog box on IIS 5.0

Where am I going wrong ?

How do I 

a) I get IIS 5.0 to import the certificates directly? (can I?) - it always reports an 
error about "Cannot import key ring backup file".

b) otherwise install the certificates I created so that I can assign an existing cert 
to IIS 5.0?

or 

c) create a CSR from IIS and sign this using openssl ?

Thanks
Ian




______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to