> > 2. Now after I installed the opensa +ssl the server is working but I am
> > getting the message under netscape broeser : " the certificate that the
> > site ...... has presented does not contain the correct site name
> > The certificate that present ed: Snake Oil, LTD
> > Do I need to configure the "key" ? Or what ?
> >
> > How can I do CA my self under w32 ?
> > If I need oficial CA , how can I do it ?
>
> You need to use OpenSSL to make a server key. You can either make a
> self-signed key, or generate a key and get a CA to sign it for you.
>
> The FAQ for another SSL server, TinySSL has details on how to make a key,
> see http://www.ritlabs.com/tinyweb/index.html#getdigitalid
> Also see the OpenSSL documentation.
>
Specifically, your certificate Subject (SSL_SERVER_DN) must match
your ServerName. ie:
for a server running on my localhost with
ServerName localhost
I use the certiciate with the
subject: C=AU, CN=localhost
Its only the CommonName(CN) bit you need to worry about. (I think,
someone correct me if I'm wrong)
If you certificate details aren't already displayed you can find the
details of your certificate with the command...
openssl x509 -in mycertificatefile -text
Cheers,
Scott
