Costantino,
I've been playing with personal cert's and so I believe you would use
something like this:
openssl pkcs12 -export -keyex -noiter -keysig -in client.crt -inkey client.key
-name "Personal Certificate" -out msclient.p12
I believe that the three options (-keyex -noiter -keysig) make it
compatible with NT/IE4 as opposed to Netscape.
I don't really know the adverse effects of setting these options, I think
-noitter makes the pkcs12 blob less secure.
Don't take this as a definitive answer as I don't understand all the details
yet.
Mikey
"Costantino Imbrauglio" <[EMAIL PROTECTED]> on 05/06/2000 10:24:18
Please respond to [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
cc: (bcc: Mike Innes/Virgin Direct/GB)
Subject: x509v3 certs and NT4
Hi,
this may not be the proper mailing list for my request, but the subject is
related and maybe somebody will be able to help me.
I've generated sono "Personal Digital IDs" using openssl. The format chosen is
the PKCS12 blob file.
I've installed them on Windows 2000 without any problem. When I tried to install
the same certs under Windows NT 4 I get an error message.
Any idea on which flags need to be set in order to generate certificates
compatible with NT 4?
Thank you very much in advance.
Best regards,
Costantino Imbrauglio
********************************************************************************
Internet communications are not secure. This message is confidential to the intended
addressee. Any copying or distribution of it by anyone without the addressee's consent
may be unlawful. If you are not the intended addressee, please inform us immediately
and then delete this message.
Virgin Direct Personal Financial Service Ltd is regulated by the Personal Investment
Authority for life insurance, pension and unit trust business and represents only the
Virgin Direct marketing group. Registered office: Discovery House, Whiting Road,
Norwich NR4 6EJ, UK. Registered in England No. 3072766.
The Virgin One account is a secured personal bank account with The Royal Bank of
Scotland plc. It is provided by Virgin Direct Personal Finance Ltd which is a
representative only of Virgin Direct Personal Financial Service Ltd. Registered
office: Waterhouse Square, 138-142 Holborn, London EC1N 2TH, UK. Registered in England
no 3414708.
The Virgin Deposit Account is a personal deposit account with The Royal Bank of
Scotland plc administered by Virgin Direct Personal Financial Service Ltd.
All telephone calls are recorded and may be monitored.
********************************************************************************
|
Hi,
this may not be the proper mailing list for my
request, but the subject is related and maybe somebody will be able to help
me.
I've generated sono "Personal Digital IDs" using
openssl. The format chosen is the PKCS12 blob file.
I've installed them on Windows 2000 without any
problem. When I tried to install the same certs under Windows NT 4 I get an
error message.
Any idea on which flags need to be set in order to
generate certificates compatible with NT 4?
Thank you very much in advance.
Best regards,
Costantino Imbrauglio
|
