Hello
All.
Got a basic
question. Basically I have created a root CA with one Child CA. The child CA is
used to issue ceritificates for SSL on http. Basically I generate a CSR
request on my IIS server and then go and sign it in NewPKI. So now I take
this signed certificate and upload it into IIS. No problem so far. Open a
browser and navigate to the site and up pops a warning screen saying that
the certificate was issued by a company I dont trust. This was expected the
first time and I then installed the certificate. However this warning keeps
popping up. After carefull examination of the certificate I noticed that the
cerificate does not include the root CA only the child CA, thus there is no
correct CA Chain in the certificate. Since the root CA is not included the
certificate cannot be verified up to a trusted certification authority.The
following screen shot illustrates this.
To fix this I would
need to be able to export the certificate with the CA chain right? I know the
the PKCS7 file format caters for this but I can only export in .CER (x509)
format. Hopefully this is enough information for you guys to point me in the
right direction.
Regards
Neil
quidquid excusatio prandium pro (any excuse for lunch
?)
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.11.0/103 - Release Date: 2005/09/15
