This can't be the problem, as I specify the CA using SSLCACertificatePath using the proper HASH names. I've also tried SSLCACertificateFile.

using s_client with SSLVerifyClient optional, it shows that the server is correctly identifying which CAs are allowed.

I think the problem is with Safari and Keychain. I shall look further into the matter.

On Jun 28, 2005, at 10:27 AM, Paul Puschmann wrote:

I think that Eckard Wille might be right. So have some experiments with

your ca-files and certificates.


Reply via email to