Hi!

Do anyone have worked with the Verisign StepUp/Bank/128-enabeling 
certificates and OpenSSL/SSLeay?

Verisign use what they call a "INTERMEDIATE_CA_CERTIFICATE" 
(server cert chain) that signes the "server certificate".

The "INTERMEDIATE_CA_CERTIFICATE" are signed by the 
"VSign Class 3 Public Primary Certification" 
(included in the OpenSSL:   {SRC-PATH}/certs/vsign3.pem

------------------------------------------------------------
vsign3.pem ===sign===> Intermediate ===sign===> server cert
------------------------------------------------------------

Have anyone succeded in doing this???!

Verisign says that this will only work with:
--------------------------------------------
on one of the following types of server software, 
all of which support chained certificates:

*Microsoft IIS 3.0 or 4.0, on NT 4.0 Service Pack 3.0, with upgrade
patch 
*Domestic Version of Netscape Enterprise, Proxy, or Admin Server 3.0+,
or
Netscape 2.01c 
*Lotus Domino 4.6.2 or later 
*Nanoteq Netseq server NetSeq Secure with Virtual Server Module Enabled 
*HP Virtual Vault w/Netscape Enterprise 3.0 Domestic Version, or
Netscape
2.01c 
*Compaq/Tandem iTP Webserver 

================================================================
================================================================

Top CA cert (vsign3.pem)
------------------------
subject=/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification 


INTERMEDIATE_CA_CERTIFICATE
---------------------------
Issuer: C=US, O=VeriSign, Inc., OU=Class 3 Public Primary Certification
Authority
Subject: O=VeriSign Trust Network, OU=VeriSign, Inc., OU=VeriSign
International Server CA - Class 3, OU=www.verisign.com/CPS Incorp.by
Ref. LIABILITY LTD.(c)97 VeriSign


-- 
Pär Ahrén, Celo communication AB, Mobile: +46 708 97 74 71
[EMAIL PROTECTED], http://www.celocom.se/pera
PGP 5.0i-Fingerprint: 7CB0 648F ABCE 9431 1F9E  41E1 30BF 78B9 6309 7850
begin:vcard 
n:Ahren;Per
tel;cell:+46 8 708 97 74 71
tel;fax:+46 8 736 61 70
tel;work:+46 8 457 08 04
x-mozilla-html:FALSE
url:http://www.celocom.com
org:<A HREF="http://www.celocom.com">Celo Communications</A><br><img src="http://www.celocom.com/images/celologo_small.jpg">;System Integration
adr:;;Sveavägen 166, 16tr;Stockholm;;104 35 Stockholm;Sweden
version:2.1
email;internet:[EMAIL PROTECTED]
title:Technical consultant
x-mozilla-cpt:;2816
fn:Per Ahren
end:vcard

S/MIME Cryptographic Signature

Reply via email to