Experimenting with key, csr, etc creation reveals that if I creat the keys using openssl 92b, ns405/8 give me the error message if I step back and use ssleay from openssl 91c, all works fine. This appears to be consistent with all the trials I've run (about a dozen) using this procedure: ssleay genrsa -des3 -rand file1:...:file5 1024 > www.xxx.com.key or openssl openssl req -new -key ../private/www.xxx.com.key > www.xxx.com.csr openssl req -x509 -in www.xxx.com.csr -key ../private/www.xxx.com.key > www.xxx.com.crt using ssleay (openssl 91c) for the first step produces good results for NS 405/8 using openssl 92b causes ns 405/8 to produce the error: "The certificate is not approved for the attempted operation" MSIE and ns v. 3 browsers continue to work fine. [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
