Hi Holger,

I like to isue my certs agains a well-know-trusted CA like verisign or thawte. 
The idea is , that public keys are allways trusted also for external uses.
The certpath for a client-cert should look like this:
ThawteCA->MyCA->MyUser

I spoke with verisign an thawte, both are unable to issue such certs. Who has 
implemented such a solution ? Where is the cert from ?

You wont find anyone of the "trusted companies" who gives you such a certificate because this would ruin their business model... If your company is "heavy" enough you can talk to Microsoft/Mozilla to include your root into the next Update of the Browser. AFAIK you have to pass a security audit with a major consulting company which will cost you some bucks (a friend of mine talked about some hundred-thousands)

Oliver
--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat: http://www.ldv.ei.tum.de/page72

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to