---------- X-Sun-Data-Type: text X-Sun-Data-Description: text X-Sun-Data-Name: text X-Sun-Charset: us-ascii X-Sun-Content-Lines: 75 > From [EMAIL PROTECTED] Wed May 26 18:32 MET 1999 > Received: from north.tana.it (north.tana.it [10.2.3.4]) > by north.tana.it (8.8.7/8.8.5) with ESMTP id SAA11794 > for <[EMAIL PROTECTED]>; Wed, 26 May 1999 18:31:48 +0200 (METDST) > Received: from www.tana.it > by north.tana.it (fetchmail-4.3.2 POP3 run by ale) > for <[EMAIL PROTECTED]> (single-drop); Wed May 26 18:31:48 1999 > Received: from opensource.ee.ethz.ch (unverified [129.132.7.153]) by www.tana.it > (Rockliffe SMTPRA 2.1.7) with SMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>; > Wed, 26 May 1999 18:11:36 +0200 > Received: by en5.engelschall.com (Sendmail 8.9.2) for openssl-users-L > id OAA24500; Wed, 26 May 1999 14:55:54 +0200 (MET DST) > Received: by en5.engelschall.com (Sendmail 8.9.2) via ESMTP for <[EMAIL PROTECTED]> > from tn.village.it id OAA24489; Wed, 26 May 1999 14:55:42 +0200 (MET DST) > Received: from pc586 (dialup-ge-34.village.it [194.184.119.162]) > by tn.village.it (8.9.0/8.8.7) with SMTP id OAA14315 > for <[EMAIL PROTECTED]>; Wed, 26 May 1999 14:49:32 +0200 (MET DST) > Message-ID: <000e01bea776$f730c2a0$d938fea9@pc586> > From: "Davide Campanella" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Subject: How to have the client's certificate... > Date: Wed, 26 May 1999 14:54:29 +0200 > MIME-Version: 1.0 > X-Priority: 3 > X-MSMail-Priority: Normal > X-Mailer: Microsoft Outlook Express 4.72.3110.5 > X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3 > Sender: [EMAIL PROTECTED] > Precedence: bulk > Reply-To: [EMAIL PROTECTED] > X-Sender: "Davide Campanella" <[EMAIL PROTECTED]> > X-List-Manager: OpenSSL Majordomo [version 1.94.4] > X-List-Name: openssl-users > Content-Type: multipart/alternative; boundary="----=_NextPart_000_0009_01BEA787.A7F000A0" > Content-Length: 1759 > X-Lines: 52 > Status: RO > > I have a problem because my server can't receive the client's certificate... > I'm not sure if I have a problem in the client or in the server. I'm not sure either, since you don't say what's your client. AFAIK, it may be a problem of mime types. Netscape needs to receive certificates with a mime type of "application/x-x509-xxx-cert", where xxx is any of "user", "ca" and "email". It doesn't mind the format the certificate is actually written in (der or text) but it wants to know its meaning. (For type "user" it looks for a match in its cash of hidden requests.) Personally, I added the following in Apache's httpd.conf: AddType application/x-x509-ca-cert .ca-cert AddType application/x-x509-user-cert .usr-cert AddType application/x-x509-email-cert .mime-cert (only the "ca" type was conditionally defined. You don't need an ssl aware http server to define that type, though.) but then I must make sure if to copy the certificate with the right extension, depending on who is going to get it. (Perhaps that's why most people use scripts for that task.) Hope this helps Ciao Ale > > I'm using openssl-0.9.3... I tried everything that I read in openssl-users... > > Bye, > Davide > ---------- X-Sun-Data-Type: html X-Sun-Encoding-Info: quoted-printable X-Sun-Content-Lines: 22 <!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN"> <HTML> <HEAD> <META content=3Dtext/html;charset=3Diso-8859-1 = http-equiv=3DContent-Type> <META content=3D'"MSHTML 4.72.3110.7"' name=3DGENERATOR> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT color=3D#000000 size=3D2>I have a problem because my server = can't receive=20 the client's certificate... I'm not sure if I have a problem in the = client or in=20 the server.</FONT></DIV> <DIV><FONT color=3D#000000 size=3D2></FONT> </DIV> <DIV><FONT color=3D#000000 size=3D2>I'm using openssl-0.9.3... I tried = everything=20 that I read in openssl-users... </FONT></DIV> <DIV><FONT color=3D#000000 size=3D2></FONT> </DIV> <DIV><FONT color=3D#000000 size=3D2>Bye,</FONT></DIV> <DIV><FONT color=3D#000000 size=3D2> Davide</FONT></DIV> <DIV><FONT color=3D#000000 size=3D2></FONT> </DIV></BODY></HTML> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]