Hi,
* I've recently installed an Apache 1.3.6 + latest mod_ssl +
openssl 0.9.2
* I've successfully craeted my own CA (whoope for me).
* I've successfully signed my own web service using the above CA
(whoope again).
I albiet lost about all the client / user certificates mess.
What I _want_ now, is to create client certificates so that certain
clients (using netscape & ie4 / ie5 from unix / win32 stations)
that __I authorize__ Will be able to use the secured part of the
server.
I know ie4/5 & netscape all use the pkcs#12 for import/export of
certificates.
I've found a pkcs extension/patch to openssl 0.9.2 from www.openca.org
Should I use the sigh.sh script to make certificates for users (such
as myself) then use 'openssl pkcs12 ....' to create p12 files which
netscape / ie4 will be a able to import?
Is this the `right' way to do this?
What other ways exist? (server side certificates?)...
Lost & hoping for redemption,
Shechter.
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]