The environment:

1level root ca
2level sub-ca signed by 1level root-ca
3level sub-ca signed by 2level sub-ca

server certificate signed with 3level sub-ca

I have installed the 1level root ca public certificate on my browser,
and I am expecting that every server certificate i have signed with
the 3level sub ca will automatically be trusted. But the browser still
gives me warnings regarding the the server certificate signed by the
3level sub-ca..

When i import the public certificate of 2level and 3level sub-ca's
into my browser then it does not produce any warnings.. For me it
seems natural that I only need the root ca certificate imported for
the browser to trust anything signed by 2level or 3level sub-ca's..

Am I right, should i export the 1level root certificate in some
specific way for this to work??

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to