How to trust a 'root' certificate

2012-04-26 Thread Tammany, Curtis
Hello- I am running Apache 2.2.22 with OpenSSL 1.0.1 on Windows (XP for dev and server 2003 for production) The site requires client (CAC) certificates. I am getting FAILED:unable to get local issuer certificate errors in my log file from Windows 7 clients. Digging suggested that I check the

RE: How to trust a 'root' certificate

2012-04-26 Thread Tammany, Curtis
I get OpenSSL to trust my DOD root certificate? Curtis -Original Message- From: Bernhard Fröhlich [mailto:t...@convey.de] Sent: Thursday, April 26, 2012 09:39 To: openssl-users@openssl.org; Tammany, Curtis Subject: Re: How to trust a 'root' certificate Am 26.04.2012 15:15, schrieb

Re: How to trust a 'root' certificate

2012-04-26 Thread Bernhard Fröhlich
Am 26.04.2012 15:15, schrieb Tammany, Curtis: Hello- I am running Apache 2.2.22 with OpenSSL 1.0.1 on Windows (XP for dev and server 2003 for production) The site requires client (CAC) certificates. I am getting FAILED:unable to get local issuer certificate errors in my log file from Windows

Re: How to trust a 'root' certificate

2012-04-26 Thread Bernhard Fröhlich
Fröhlich [mailto:t...@convey.de] Sent: Thursday, April 26, 2012 09:39 To: openssl-users@openssl.org; Tammany, Curtis Subject: Re: How to trust a 'root' certificate Am 26.04.2012 15:15, schrieb Tammany, Curtis: Hello- I am running Apache 2.2.22 with OpenSSL 1.0.1 on Windows (XP for dev and server

Re: How to trust a 'root' certificate

2012-04-26 Thread Peter Sylvester
On 04/26/2012 03:58 PM, Tammany, Curtis wrote: I don't see this as an Apache issue. The site has required client certs for years now and Apache was configured to require client certificates. I have intermediate DOD certs on the server but OpenSSL sees my DoD Root certificate as un-trusted

RE: How to trust a 'root' certificate

2012-04-26 Thread Tammany, Curtis
, April 26, 2012 10:40 To: openssl-users@openssl.org Cc: Tammany, Curtis; Bernhard Fröhlich Subject: Re: How to trust a 'root' certificate On 04/26/2012 03:58 PM, Tammany, Curtis wrote: I don't see this as an Apache issue. The site has required client certs for years now and Apache was configured

Re: How to trust a 'root' certificate

2012-04-26 Thread Peter Sylvester
: Tammany, Curtis; Bernhard Fröhlich Subject: Re: How to trust a 'root' certificate On 04/26/2012 03:58 PM, Tammany, Curtis wrote: I don't see this as an Apache issue. The site has required client certs for years now and Apache was configured to require client certificates. I have intermediate DOD

RE: How to trust a 'root' certificate

2012-04-26 Thread Tammany, Curtis
... Just put all the CA certificates into one file and remove the SSLCACertificatePath and just keep the SSLCACertificateFile All of the certs are in one file... with the root cert being the first one in the file. They all begin with -BEGIN CERTIFICATE- and end with -END

RE: How to trust a 'root' certificate

2012-04-26 Thread Tammany, Curtis
They are not test certificates. No- I cannot send them. Sorry. Curtis From: Sergio NNX [mailto:sfhac...@hotmail.com] Sent: Thursday, April 26, 2012 14:07 To: Tammany, Curtis Subject: RE: How to trust a 'root' certificate Running openssl version -d returns OPENSSLDIR: c:/openssl-1.0.1/ssl. Do

How to trust a 'root' certificate

2012-04-25 Thread Tammany, Curtis
Hello- I am running Apache 2.2.22 with OpenSSL 1.0.1 on Windows (XP for dev and server 2003 for production) I require client certificates. I am getting FAILED:unable to get local issuer certificate errors in my log file from Windows 7 clients. Digging suggested that I check the intermediate