I import in Outlook cacert.pem (cacert.crt) file but postfix
report the following error:
A CERTIFICATE that can only be used as an end-entity is being used as a CA
or visa versa"
----- Original Message -----
From: "Gerard" <postfix.u...@yahoo.com>
To: <postfix-users@postfix.org>
Sent: Friday, September 04, 2009 2:00 PM
Subject: Re: Outlook certificate with postfix
On Fri, 4 Sep 2009 15:52:33 +0700 (ICT)
Olivier Nicole <olivier.nic...@cs.ait.ac.th> wrote:
> Ok but waht certificates load in Outlook
> I have 3 certificate
> cacert.pem
> mydomain-key.pem
> mydomain-cert.pem
You have one certificate (mydomain-cert.pem), one certificate
authority (cacert.pem) and one key (mydomain-cert.pem).
What you will want is to add cacert.pem to outlook, so any new
certificate validated by cacert.pem is automatically accepted by
outlook.
You should try something like what is described on the page
http://itserv.ait.ac.th/Helpdesk/announce/ie_oe_win.html (sorry for
the self advertissement), replacing "AIT CA certificate" with your
cacert.pem file.
To make a .crt from a .pem, simply edit the file and remove all the
text before the -----BEGIN CERTIFICATE----- line. (Can someone
confirm?)
From: http://support.citrix.com/article/CTX106631
Use the openssl command to convert between formats as follows:
To convert a certificate from PEM to DER: x509 \u2013in input.crt
\u2013inform PEM \u2013out output.crt \u2013outform DER
To convert a certificate from DER to PEM: x509 \u2013in input.crt
\u2013inform DER \u2013out output.crt \u2013outform PEM
To convert a key from PEM to DER: rsa \u2013in input.key \u2013inform PEM
\u2013out output.key \u2013outform DER
To convert a key from DER to PEM: rsa \u2013in input.key \u2013inform DER
\u2013out output.key \u2013outform PEM
--
Gerard
postfix.u...@yahoo.com
TO REPORT A PROBLEM see http://www.postfix.org/DEBUG_README.html#mail
TO (UN)SUBSCRIBE see http://www.postfix.org/lists.html
It is a poor judge who cannot award a prize.
