Hi !
My self signed SSL-Server certificate works ok with Netscape but
MSIE 5.0 says following about the certificate :
"This certificate cannot be verified due to a lack of information"
I make the fertificate with "make certificate TYPE=custom"
This will produce 4 files : ca.crt, server.key, server.crt and server.csr
The files server.key and server.crt are used by apache
Why does the server.crt not work with MSIE 5.0 and what can I do?
I think it's not the problem of the X509v3 extensions, because I
can import an self signed certificate into MSIE 5.0 from the site
www.softcarrier.de which
do not contain any X509v3 extensions !
Thanks, Erik
The server.crt in clear text is :
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: md5WithRSAEncryption
Issuer: C=DE, ST=Hamburg, L=Hamburg, O=Test, OU=Certificate CA,
[EMAIL PROTECTED]
Validity
Not Before: Aug 12 12:19:42 1999 GMT
Not After : Aug 11 12:19:42 2000 GMT
Subject: C=DE, ST=Hamburg, L=Hamburg, O=Test, OU=Certificate,
[EMAIL PROTECTED]
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public Key: (512 bit)
Modulus (512 bit):
00:fd:58:fa:c6:a6:c3:13:71:80:b3:73:7d:a8:31:
2b:0a:2c:4d:82:bd:6d:aa:a9:12:a0:36:64:1f:80:
10:3f:c0:b1:ea:4a:56:e2:b4:3f:ab:95:4e:25:c2:
99:7e:f8:90:8c:17:44:71:12:41:fa:3d:9e:b8:6e:
35:b1:2e:3b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Alternative Name:
email:[EMAIL PROTECTED]
Netscape Comment:
mod_ssl generated custom server certificate
Netscape Cert Type:
SSL Server
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage:
Certificate Sign, CRL Sign
Signature Algorithm: md5WithRSAEncryption
9c:49:8f:7d:a6:ae:5f:ec:39:8a:9f:bf:b4:c1:c8:ba:6d:55:
96:36:b6:50:76:67:97:3d:c7:4b:b8:b6:d7:3b:c2:09:6b:5d:
2c:f6:95:7a:f8:54:8c:f3:d8:80:fa:fd:41:2b:2e:be:59:4d:
5a:f2:23:fc:66:ef:cb:7d:9e:dc
I use apache 1.3.6 + mod_ssl-2.3.6-1.3.6 + openssl-0.9.3a
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
