I think I have seen this problem you are talking about with apache 1.3.6 and
mod_ssl 2.3.11-1.3.6. The problem is with the apache & mod_ssl. I found
that if I remove password protection of my certificate database in Navigator
every thing (almost) works. Navigator 4.7 seems to work a little better.
I also tested with some certificates that were generate by Netscape
Certificate Server and had the same problem.
I finally had to purchase a copy of Stronghold to find a work around. I
could not get it to work with other implementations Apache with SSL. This
has been discussed in the archives but I have not seen any work around for
it yet.
Arend van der Veen
-----Original Message-----
From: David Peele <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Thursday, February 17, 2000 12:31 AM
Subject: Netscape 4.51 crashes with Client Certs
>We have a very perplexing problem...
>
>We are implementing a CA (using OpenSSL 0.9.4, apache 1.3.9, and
>mod_ssl-2.4.10-1.3.9) and our users are using Netscape 4.51 (no upgrade
>option currently exists for them). They can successfully generate a
>certificate request which is delivered to our CA which we can successfully
>sign and then make the resulting certificate available for pick-up. The
>users are then able to retrieve the certificate, which is then visible as a
>personal certificate and validates properly when the Verify button is
>pressed.
>
>Everything is fine so far ... BUT, when they visit the site which requires
>client certificates, Netscape crashes. Looking at the apache/mod_ssl trace
>logs it appears that the initial SSL handshake completes. The server then
>requests a client cert and no further communication is received. It would
>appear that Netscape is crashing when parsing the certificates to display
>the certificate choices to the user.
>
>If we export the certificate from Netscape and import it into Internet
>Explorer, it works as expected...
>
>Anyone have any ideas??
>
>Thanks!
>
>--
>David Peele mailto:[EMAIL PROTECTED]
>
>
>
>
>
>
>_______________________________________________________
>Get 100% FREE Internet Access powered by Excite
>Visit http://freeworld.excite.com
>
>______________________________________________________________________
>Apache Interface to OpenSSL (mod_ssl) www.modssl.org
>User Support Mailing List [EMAIL PROTECTED]
>Automated List Manager [EMAIL PROTECTED]
>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
