On Mon, Oct 16, 2000, Tagoon Manaso wrote:

> I 've created my real SSL server Certificate and used my own Certificate
> 
> Authority (CA), everything seem OK. I have two question about my CA :
>   1. How to import my CA Certificate into the browser(my org. signer)
> then I can
> access to my secure server without 6-7 small warning windows from the
> browser ?

Because of the "AddType application/x-x509-ca-cert .crt" in
the pre-configured httpd.conf-dist, just rename your CA cert
to xxxx.crt, place it into your DocumentRoot and load it with
http://localhost/xxxx.crt.

>   2. Can I change my serial number (Serial Number : 01) in my CA ? How ?

You cannot change anything after your CA cert is issued.  All the paramaters
(including the serial number) have to be specified when it is generated. Later
you cannot adjust them.
                                       Ralf S. Engelschall
                                       [EMAIL PROTECTED]
                                       www.engelschall.com
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to