Is there an nsopenssl equivalent to Apache + MOD SSL/OPEN SSL
SSLCertificateChainFile?

I have a certificate that was signed by a CA certificate that is not
in the netscape browser but a certificate up the chain is.

Root Cert (is in browser)
  |
   -- signs ->-
               |
   Cert X (not in browser)
     |
      -- signs ->-
                  |
      Cert Y (not in browser)
        |
         -- signs ->-
                     |
          My server certificate.

Apache installation instructions from the company that signed the Cert
say to put Root Cert, Cert X, and Cert Y in a file that Apache directive
'SSLCertificateChainFile' points to.

I can install Certy Y in my browser and all works well but I paid
to have my certificate signed (what a racket) so my users wouldn't
have to do that.

- Keith

Reply via email to