Re: MSIE5 and Netscape client certificates

1999-09-28 Thread Dr Stephen Henson
Hector Jimenez Pensado wrote: > > > > > > > 5. I also convert the demoCA/cacert.pem to PKCS#12: > > > openssl pkcs12 -export -in demoCA/cacert.pem -inkey > > private/cakey.pem -name > > > "MY_ORG CA" -certfile demoCA/cacert.pem -out thecacert.pfx > > > > > > > DO NOT DO THIS! If you do this with

RE: MSIE5 and Netscape client certificates

1999-09-28 Thread Hector Jimenez Pensado
> > > > 5. I also convert the demoCA/cacert.pem to PKCS#12: > > openssl pkcs12 -export -in demoCA/cacert.pem -inkey > private/cakey.pem -name > > "MY_ORG CA" -certfile demoCA/cacert.pem -out thecacert.pfx > > > > DO NOT DO THIS! If you do this with users you end up giving them the CA > private key

Re: MSIE5 and Netscape client certificates

1999-09-28 Thread Dr Stephen Henson
Hector Jimenez Pensado wrote: > > Hi all, > > 5. I also convert the demoCA/cacert.pem to PKCS#12: > openssl pkcs12 -export -in demoCA/cacert.pem -inkey private/cakey.pem -name > "MY_ORG CA" -certfile demoCA/cacert.pem -out thecacert.pfx > DO NOT DO THIS! If you do this with users you end up gi