I can answer the one about import CA into IE and Opera,
<begin "borrowed" information from various sources>
    # Make a CA for easy importing into Netjunk & IExploder
    # Put this somewhere on your server and set it's mimetype to
    # application/x-x509-ca-cert
    # (if using Apache just add 
    # "application/x-x509-ca-cert cacert"
    # to the "mime.types" file)
    openssl x509 -out ca.cacert -outform NET -in ca.crt
<end>

I've had some trouble (particularly with opera) requiring a special
extension on the file, but I don't think IE coughed on that.

On Sun, Jun 03, 2001 at 06:28:14PM +0100, J. Chong wrote:
> Hi all,
> 
>       I need your help and expertise desperately. I have been stuck here
> for like million years. The things I would like to do is:
> 
>       1. Become a CA on myself (I have successfully created my own CA
>            cert and key by mod-ssl FAQ).
> 
>       2. Then, I have successfully created a server certificate from my
>          own CA (also from the help of mod_ssl FAQ).
> 
>       Before all this I have installed the Apache-mod_ssl-OpenSSL. 
> 
>       3. Now what I wish to do is to enable the client authentication on
>          the server using Internet Explorer.
> 
>       The problems are:
> 
>       1. I have no idea how to install my own CA certificate (or server
>          certificate?) on the Internet Explorer.
> 
>       2. I have no idea how to generate a personal certificate (or
>          client certificate) for client authentication to the server and
>          how to install it on the Internet Explorer.
> 
> 
>       Please help. Thank you very much.
> 
> 
> Best regards,
> Jordan CN CHONG 
> 
> 
> 
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
> 

-- 
Object Oriented Analysis and Design was developed by
coorporations to leviate workshortages
            --- Tobias

PGP signature

Reply via email to