Hello, > I try to Google for openssl x509 -purpose, but no information at all. > What is that ?? I try this command and it gives me : > > Certificate purpose: > SSL client : yes > SSL client CA: no > SSL server : no As you see, your SSL server certificate is not "certified" to this purpose. For SSL server certificate this should be "yes". You must get correct certificate.
> SSL server CA: no > Netscape SSL server: No > Netscape SSL server CA: No > S/MINE signing: YES > S/MINE signing CA: NO > S/MINE encrytion: YES > S/MINE encrytion CA: NO > CRL signing: No > CRL signing CA: No > Any Purpose: Yes > Any Purpose CA: Yes > OCSP helper: Yes > OCSP helper CA: No This looks like end user certificate (mail, SSL client) but you need SSL server certificate. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
