Openssl and config file options

2012-05-17 Thread kenc_openssl
Hi, I am trying to add extra extensions to certain certificates that I sign with my own CA. 1) I'd like all server generated certificates to have: basicConstraints = CA:false and one of the certificates to have: extendedKeyUsage = serverAuth I created an extra section called new_section in m

Re: self-generated, self-signed root CA and Client Auth Certs not working

2012-06-05 Thread kenc_openssl
I have got this to work in IE using my own CA and generated server certificates, so we'll use this browser as an example. I presume you have secure copied the CA.crt over to the client machine. In the Certificates snap-in in MMC (make sure you manage certificates for the Computer Account), Imp