After installing the mod_ssl package, i got the following problem: certificates that i created are accepted without any problem by the Netscape Navigator, but not by MSIE. I am creating the keys with the following script (which is a combination of lines from the F.A.Q and cca.sh. I needed to use this because sign.sh is creating a database of certificates that cca.sh is not, so i followed the sign.sh steps listed in the FAQ, then i converted the .crt to a pkcs12 format to be imported into browsers. ------------client.sh openssl genrsa -des3 -out client.key 1024 openssl req -new -key client.key -out client.csr ./sign.sh client.csr openssl pkcs12 -export -in client.crt -inkey client.key \ -certfile ca.crt -name "`openssl x509 -noout -text \ -in client.crt |grep Subject: | sed -e 's;.*CN=;;' -e 's;/Em.*;;'`" \ -caname "`openssl x509 -noout -text -in ca.crt |grep Subject: | \ sed -e 's;.*CN=;;' -e 's;/Em.*;;'`" -out client.p12 --------------------- from this script i get a .p12 file, that works great with netscape.. Is something wrong in what i am doing, that the certificate is not imported by MSIE ? (it says input format is invalid). ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
