Re: OpenSSL 0.9.2b, Netscape and Email certificates

1999-04-13 Thread Steffen Dettmer
> On another host that also refused to work I cross checked. The security > page for the email says _you can sign_ and can check the button. > The error message is: > This message cannot be encrypted or signed because you do not > yet have an email certificate. Click on the `Security' icon for mor

Re: OpenSSL 0.9.2b, Netscape and Email certificates

1999-04-13 Thread Steffen Dettmer
> > [ x509v3_ext_client ] > > basicConstraints=CA:FALSE > > nsCertType = client, email #SSL Client > ^^^ > So you really _set_ these values (which is understandable but not > necessary as of the comment in the sample openssl.cnf!). Yes, it's not necessary, but

Re: OpenSSL 0.9.2b, Netscape and Email certificates

1999-04-13 Thread Dr Stephen Henson
Lutz Jaenicke wrote: > > Hi netters, > > I am playing with client certificates for some time. Yesterday I stumbled > over the question of using client certificates created with OpenSSL for > signing/encryption of emails with netscape. > When trying to use a (otherwise working) client certificate

OpenSSL 0.9.2b, Netscape and Email certificates

1999-04-13 Thread Lutz Jaenicke
Hi netters, I am playing with client certificates for some time. Yesterday I stumbled over the question of using client certificates created with OpenSSL for signing/encryption of emails with netscape. When trying to use a (otherwise working) client certificate for signing, Netscape complains how