Loi Dan schrieb: > > --- Michael Bell <[EMAIL PROTECTED]> wrote: > > Loi Dan schrieb:
> > > click 'Continue...' button, I see list of > > appending > > > requests. But 'log' file appears following (both > > CA > > > and RA): > > > - - - - - - - - > > > Error loading SPKAC > > > (a number): error:0B081076:x509 certificate > > > routines:NESTCAPE_SPKI_B64_decode:base64 decode > > > error:x509spki.c:91: > > > - - - - - - - - > > > Each next step also makes above error lines in > > 'log'. > > > I don't known why? > > > > I don't get this error. So does anything not work? > CertReq is approved but error sign. Reason is I use > full country name. When I change country name only 2 > letter, that error don't exist. Why does Country name > only 2 letter? If I want to use full country name then > how does I do? It is an ISO-definition. There is standard for countrycodes. I don't know how to store the hole countryname in a DN. > Are pair of Private/Pulic key generated by browser? Yes, if you use the browser specific requestforms. > Where are that pair key stored (on user's machine)? Each browser access the keys via it's cryptointerface (Netscape uses PKCS#11 and IE uses CAPI). So the keystore can be a softwaretoken (the browsers default) or a hardwaretoken like a smartcard. > Is > CA/RA server stores that pair of key? Yes, if you use the basicrequest. This key you can remove from the RA/CA-DB manually if you enrolled the certificate and the key. > When a user requests a cert, he is asked the password > by Nestcape Communicator. If he re-installs his > browser or his Operator System then that password is > lost ?!!! The password (and the keys) is only lost if you removed all the users data. Michael P.S. pleade reply to the list too. -- ------------------------------------------------------------------- Michael Bell Email (private): [EMAIL PROTECTED] Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 Unter den Linden 6 Fax: +49 (0)30-2093 2959 10099 Berlin Germany http://www.openca.org _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
