OK, I did some more research. Currently only smsbox actually bothers to
read the "ssl-client-certkey-file" option. My understanding is, that this
is supposed to be a client certificate that proves the identity of the
client to the server.
Trusted Root CA certificates are loaded from the OpenSSL default location.

Is this correct? If so, I'm going to extend the userguide to make things
it a little bit less confusing.

Regards
  J�rg

-----Original Message-----
From: J�rg Pommnitz
To: '[EMAIL PROTECTED]'
Sent: 12/6/01 11:49 AM
Subject: More than one root CA for Kannel as SSL client

Hi List,
the documentation says

 > Using SSL client support 
 > 
 > To use the client support please use the following configuration 
 > directive within the core group 
 > 
 > group = core 
 > ... 
 > ssl-client-certkey-file = "filename" 
 > 
 > Now you are able to use https:// scheme URLs within your WML decks
and 
 > SMS services.

Well, I suspect that the ssl-client-certkey is actually a root CA
certificate.
Am I right or is this a client certificate to be presented to the server
to
prove the client identity?

If it is a root certificate, just one is of little use. Mozilla comes
with
98 root certificates and growing. How do I use more than one root
certificate?

Regards
  J�rg


Reply via email to