Thanks for the reply! Dont think I asked the right question, sorry. Is it normal to merge the ca pub key into the server cert ? (The ca is in the ca store in browser.) i was told to import ca into server cert to solve problem. I thought it was already part of client by default.
Its the info about importing the ca part into the client cert that is confusing me since I think its already there. Really lost... Thanks HMB daniel rahmeh wrote: > > Hi, > > No, it's not the same at all. You import the certificate (the public key) > of > the CA to your computer in order to verify the validity of other's > certificates; Actually the CA sign a certificate with it's private key. In > order to verify that a certificate has been signed by the CA, you need the > ca public key on your computer. > > Now, when a CA signs your certificate, it allows others (who have the CA > certificate on their computer) to verify the signature of your > certificate. > So in general, in order to verify the certificate mutualy between two > parties, they mus trust the same CA. > > sorry if the naswer is not complete, other users may complete it, i > hope... > > On 6/26/07, hmb <[EMAIL PROTECTED]> wrote: >> >> >> Hello, >> >> Can someone tell me if the ca signing a client cert is the same as >> importing >> the ca pub key into the client and if it is what the difference might >> be. >> I am having problems with email signing using a chained cert. The >> signer(i >> assume ca part of user cert) can't be verified. The ca is in the root ca >> store. >> >> Any HELP is very much needed or a point in the right direction. >> >> Thanks in advance, >> HMB >> -- >> View this message in context: >> http://www.nabble.com/ca-cert-import-question-tf3977740.html#a11291355 >> Sent from the openca-users mailing list archive at Nabble.com. >> >> >> ------------------------------------------------------------------------- >> This SF.net email is sponsored by DB2 Express >> Download DB2 Express C - the FREE version of DB2 express and take >> control of your XML. No limits. Just data. Click to get it now. >> http://sourceforge.net/powerbar/db2/ >> _______________________________________________ >> Openca-Users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/openca-users >> > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Openca-Users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openca-users > > -- View this message in context: http://www.nabble.com/ca-cert-import-question-tf3977740.html#a11314813 Sent from the openca-users mailing list archive at Nabble.com. ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
