Hi,
I copied 'browser_01.p12' file (Cert for RA) to 'p12' directory on RAserver. But when I approve a request (from RAserver), it still has follow notice : "Sign is need proceed!".
I have to import the cert for RA (*.p12) into the browser (eg. Nestcape) , haven't I ?
How to import *.p12 into Nestcape browser?
Loi Dan
alexandru matei <[EMAIL PROTECTED]> wrote:
Loi Dan wrote:
>
> I generated a ServerCertificate from CA server with
> 'openca-newcert' command, then use 'openca-browserexp'
> command. I get 2 file : '01.pem' and 'browser_01.p12'.
> But I don't known how to import them into browser of
> RAserver (Nestcape).
>
> I ask more: when we use 'openca-newcert' command, it
> requires us to choose :
> 1. User certtificate
> 2. Server certificate
> 3. CA certificate
> Which case 'Server Certtificate' is used in ? What
> for?
>
That certificate you shall use for making your apache server work with ssl
encription (for RAserver purposes) but it is not required in test
environment; see more on apache website and also modssl website.
> Similar question for 'CA Certificate'.
The CA certificate all users wich trust your CA must import in their
browser. This is called the "trust anchor". This means that if I want to
verify an correspondent certificate I'll learn that the signer's signer's
... etc signer of the certificate is the CA. So if I trust the CA, all
certs in the verify chain can be trusted.
>
> If I need a RA certificate then what must I do?
> (choose 2 or 3 ?)
>
You need for sure the RA certificate (you noticed sign is needed to
proceed). This is the way that the RAoperator certifies that he agree with
issueance of user certificate. When you have a RAoperator certificate
(option 2 ) just save it locally to your computer (.p12) and import it in
netscape (or IE).
>
> Loi Dan
> >
> > Loi Dan wrote:
> >
> > >
> > >
> > > Michael Bell <[EMAIL PROTECTED]>
> > wrote:
> > >
> > > Loi Dan schrieb:
> > > >
> > > > --- Alex wrote:
> > > > > Hi.
> > > > >
> > > > > You must import the CA-certificate into
> > the browser.
> > > > > It can be found at the public server (the
> > first
> > > > > option) if you initialized previously the
> > RAServer.
> > > > >
> > > > I imported CA cert into Nestcape browser
> > but it still
> > > > displays "Sign is need proceed!". So the
> > request isn't
> > > > approved.
> > >
> > > Do you have a usercertificate?
> > >
> > > Michael
> > >
> > > Request that I want to approve is
> > userCertificate.
> > >
> > > Loi Dan
> > >
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
