Hi,
* I've recently installed an Apache 1.3.6 + latest mod_ssl + 
  openssl 0.9.2
* I've successfully craeted my own CA (whoope for me).
* I've successfully signed my own web service using the above CA
  (whoope again).

I albiet lost about all the client / user certificates mess.

What I _want_ now, is to create client certificates so that certain
clients (using netscape &  ie4 / ie5 from unix / win32 stations)
that __I authorize__ Will be able to use the secured part of the
server.

I know ie4/5 & netscape all use the pkcs#12 for import/export of
certificates.
I've found a pkcs extension/patch to openssl 0.9.2 from www.openca.org

Should I use the sigh.sh script to make certificates for users (such
as myself) then use 'openssl pkcs12 ....' to create p12 files which 
netscape / ie4 will be a able to import?

Is this the `right' way to do this?
What other ways exist? (server side certificates?)...

        Lost & hoping for redemption,
        Shechter.


______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)  www.engelschall.com/sw/mod_ssl/
Official Support Mailing List               [EMAIL PROTECTED]
Automated List Manager                       [EMAIL PROTECTED]

Reply via email to