> [EMAIL PROTECTED] wrote:
> >
> > hi,
> > I have installed the Netscape Certificate Server 1.01 for myself.
> > and I request a personal certificate through my Netscape Navigator 4.05.
> > I have set the CA is trusted .
> >
> > but when I open the Netscape Navigator ,select "security" ,"certificates",
> > "yours",select the certificate, and click "verify"
> > but the brower says:
> > Verification of the selected certificate failed for the following reasons:
> > CN=rd,OU=ncic,O=ac,C=us[Certificate Authority]
> > Certificate not trusted
> >
> > why?
>
> The 'verify' operation in Netscape just verifies for email use so if the
> CA isn't set to allow email then this is the problem. Otherwise its
> possible I suppose that the issuer and subject names are the same or
> very similar and it is trying to check the user certificate as a CA:
> which wont work.
>
> Steve.
> --
> Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
> Personal Email: [EMAIL PROTECTED]
> Senior crypto engineer, Celo Communications: http://www.celocom.com/
> Core developer of the OpenSSL project: http://www.openssl.org/
> Business Email: [EMAIL PROTECTED] PGP key: via homepage.
>
> ______________________________________________________________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List [EMAIL PROTECTED]
> Automated List Manager [EMAIL PROTECTED]
hi,
thank you!
But my personal certificate is for both SSL Client and SSL email.
the issuer and subject names are also comlpetely different.
Originally,I want to have a SSL connection with my server using this
certificate.The server is based on SSLeay-0.8.1 and requests a client
certificate.But when I submit the certificate,the browser says:"
the server can not verify your certificate."
I have copied the CA's certificate chain into the server,and set the
"SSLCACertificatePath" and "SSLCACertificateFile" point to it.
So I think the client certificate may be not right.and then I use
the Netscape Navigator's "verify" to verify my certificate.
Why my Client Certificate is not recognized ?
what should I do ?
thanks for your help!
________________________________________________
欢迎您使用163电子邮局免费服务 http://www.163.net
163超级酷全国最大的免费个人主页基地http://cool.163.net
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
