Hi,

> so in fact I tried with NS v2.0, 3.0 , MSIE 4.0 5.0, and it works fine with a
> slf signed certificate . The only software which doesn't run with it is NS 4.06
> and latter versions.
> So what is the problem .... is the below solution is the right way ?

I had a similar problem to this last week.

It turns out the Netscape v4.06 or higher, requires that the CN (common 
name) of the certificate matches the DNS name of the server.  I think this 
_is_ part of the standard, it is just that the other browsers don't complain.

So if your URL is:  https://secure.mydomain.com/

the CN should be:  secure.mydomain.com

The basic openssl.cnf file prompts for this with "Your name" as the example, 
and I at first was putting "webmaster" in that field.

Took a bit of tracking down but now all of the browsers we use here accept 
the self-signed cert.

Fare Thee Well
Anthony Peacock       
CHIME, UCL Medical School
E-Mail: [EMAIL PROTECTED]
WWW:    http://www.chime.ucl.ac.uk/~rmhiajp/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to