Hi!
Do anyone have worked with the Verisign StepUp/Bank/128-enabeling
certificates and OpenSSL/SSLeay?
Verisign use what they call a "INTERMEDIATE_CA_CERTIFICATE"
(server cert chain) that signes the "server certificate".
The "INTERMEDIATE_CA_CERTIFICATE" are signed by the
"VSign Class 3 Public Primary Certification"
(included in the OpenSSL: {SRC-PATH}/certs/vsign3.pem
------------------------------------------------------------
vsign3.pem ===sign===> Intermediate ===sign===> server cert
------------------------------------------------------------
Have anyone succeded in doing this???!
Verisign says that this will only work with:
--------------------------------------------
on one of the following types of server software,
all of which support chained certificates:
*Microsoft IIS 3.0 or 4.0, on NT 4.0 Service Pack 3.0, with upgrade
patch
*Domestic Version of Netscape Enterprise, Proxy, or Admin Server 3.0+,
or
Netscape 2.01c
*Lotus Domino 4.6.2 or later
*Nanoteq Netseq server NetSeq Secure with Virtual Server Module Enabled
*HP Virtual Vault w/Netscape Enterprise 3.0 Domestic Version, or
Netscape
2.01c
*Compaq/Tandem iTP Webserver
================================================================
================================================================
Top CA cert (vsign3.pem)
------------------------
subject=/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification
INTERMEDIATE_CA_CERTIFICATE
---------------------------
Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification
Authority
Subject: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign
International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by
Ref. LIABILITY LTD.(c)97 VeriSign
--
Pär Ahrén, Celo communication AB, Mobile: +46 708 97 74 71
[EMAIL PROTECTED], http://www.celocom.se/pera
PGP 5.0i-Fingerprint: 7CB0 648F ABCE 9431 1F9E 41E1 30BF 78B9 6309 7850
begin:vcard
n:Ahren;Per
tel;cell:+46 8 708 97 74 71
tel;fax:+46 8 736 61 70
tel;work:+46 8 457 08 04
x-mozilla-html:FALSE
url:http://www.celocom.com
org:<A HREF="http://www.celocom.com">Celo Communications</A><br><img src="http://www.celocom.com/images/celologo_small.jpg">;System Integration
adr:;;Sveavägen 166, 16tr;Stockholm;;104 35 Stockholm;Sweden
version:2.1
email;internet:[EMAIL PROTECTED]
title:Technical consultant
x-mozilla-cpt:;2816
fn:Per Ahren
end:vcard
S/MIME Cryptographic Signature