[EMAIL PROTECTED] schrieb:
> Hi!
> 
> Oranous Niliarm wrote:
> 
> > i had the same problem with both verisign certificate and self-signed certificate. 
>We had with verisign step up  certificate more problem. My problem was SSLRequired 
>128 bit. I commented the line and used SSLCiphers ....and so on, all internet 
>explorer version work.
> 
> Hmm, there is no SSLRequired in my httpd.conf ...
> Maybe I made a mistake while creating the keys? I followed the FAQ at 
>http://www.modssl.org/docs/2.8/ssl_faq.html :
> 
> First: "How can I create and use my own CA?"
> I followed steps 1-3, then jumped to:
> "...[I] want to create a real SSL server certificate..."
> (I entered the FQDN as CommonName)
> After that I completed step 4 of [own CA].
> Then I followed the steps "How can I get rid of the pass-phrase dialog...?"
> 
> That's all. Maybe I made a mistake somewhere? Is there anything else I can try?
> Thanks!
> 
>  ... tobias wiersch
> 
> 
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED] 






Hi Tobias,
i generate the CA certificate as below:

Key and CSR generation
1. openssl md5 *.* > rand.dat
2. openssl genrsa -rand rand.dat -out cakey.pem -des 1024
 
CA generation:
openssl req -new -x509 -keyout ./demoCA/private/cakey.pem -out 
./demoCA/certs/cacert.pem -days 3650

Generating a new key and csr and signing the csr with own ca.

1. openssl md5 *.* > rand.dat

2. openssl genrsa -rand rand.dat -out key1.pem -des 1024

3. openssl req -new -key key1.pem -out csr1.pem
4. openssl ca -policy policy_anything -out cert.pem -in csr1.pem


Good Speed
Oranous









[EMAIL PROTECTED] schrieb am 03.04.01:
> Hi!
> 
> Oranous Niliarm wrote:
__________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED] 


_______________________________________________________________________________
Alles unter einem Dach: Informationen, Fun, E-Mails. Bei WEB.DE: http://web.de
Die große Welt der Kommunikation: E-Mail, Fax, SMS, WAP: http://freemail.web.de

______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to