----------
X-Sun-Data-Type: text
X-Sun-Data-Description: text
X-Sun-Data-Name: text
X-Sun-Charset: us-ascii
X-Sun-Content-Lines: 75

> From [EMAIL PROTECTED] Wed May 26 18:32 MET 1999
> Received: from north.tana.it (north.tana.it [10.2.3.4])
> 	by north.tana.it (8.8.7/8.8.5) with ESMTP id SAA11794
> 	for <[EMAIL PROTECTED]>; Wed, 26 May 1999 18:31:48 +0200 (METDST)
> Received: from www.tana.it
> 	by north.tana.it (fetchmail-4.3.2 POP3 run by ale)
> 	for <[EMAIL PROTECTED]> (single-drop); Wed May 26 18:31:48 1999
> Received: from opensource.ee.ethz.ch (unverified [129.132.7.153]) by www.tana.it
>  (Rockliffe SMTPRA 2.1.7) with SMTP id <[EMAIL PROTECTED]> for <[EMAIL PROTECTED]>;
>  Wed, 26 May 1999 18:11:36 +0200
> Received: by en5.engelschall.com (Sendmail 8.9.2) for openssl-users-L
> 	id OAA24500; Wed, 26 May 1999 14:55:54 +0200 (MET DST)
> Received: by en5.engelschall.com (Sendmail 8.9.2) via ESMTP for <[EMAIL PROTECTED]>
> 	from tn.village.it id OAA24489; Wed, 26 May 1999 14:55:42 +0200 (MET DST)
> Received: from pc586 (dialup-ge-34.village.it [194.184.119.162])
> 	by tn.village.it (8.9.0/8.8.7) with SMTP id OAA14315
> 	for <[EMAIL PROTECTED]>; Wed, 26 May 1999 14:49:32 +0200 (MET DST)
> Message-ID: <000e01bea776$f730c2a0$d938fea9@pc586>
> From: "Davide Campanella" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: How to have the client's certificate...
> Date: Wed, 26 May 1999 14:54:29 +0200
> MIME-Version: 1.0
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 4.72.3110.5
> X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3110.3
> Sender: [EMAIL PROTECTED]
> Precedence: bulk
> Reply-To: [EMAIL PROTECTED]
> X-Sender: "Davide Campanella" <[EMAIL PROTECTED]>
> X-List-Manager: OpenSSL Majordomo [version 1.94.4]
> X-List-Name: openssl-users
> Content-Type: multipart/alternative; boundary="----=_NextPart_000_0009_01BEA787.A7F000A0"
> Content-Length: 1759
> X-Lines: 52
> Status: RO
> 
> I have a problem because my server can't receive the client's certificate...
> I'm not sure if I have a problem in the client or in the server.

I'm not sure either, since you don't say what's your client.

AFAIK, it may be a problem of mime types. Netscape needs to receive
certificates with a mime type of "application/x-x509-xxx-cert", where
xxx is any of "user", "ca" and "email". It doesn't mind the format
the certificate is actually written in (der or text) but it wants
to know its meaning. (For type "user" it looks for a match in its
cash of hidden requests.)

Personally, I added the following in Apache's httpd.conf:

AddType application/x-x509-ca-cert .ca-cert
AddType application/x-x509-user-cert .usr-cert
AddType application/x-x509-email-cert .mime-cert

(only the "ca" type was conditionally defined. You
don't need an ssl aware http server to define that
type, though.)

but then I must make sure if to copy the certificate with
the right extension, depending on who is going to get it.
(Perhaps that's why most people use scripts for that task.)

Hope this helps
Ciao
Ale

> 
> I'm using openssl-0.9.3... I tried everything that I read in openssl-users... 
> 
> Bye,
>  Davide
> 

----------
X-Sun-Data-Type: html
X-Sun-Encoding-Info: quoted-printable
X-Sun-Content-Lines: 22

<!DOCTYPE HTML PUBLIC "-//W3C//DTD W3 HTML//EN">
<HTML>
<HEAD>

<META content=3Dtext/html;charset=3Diso-8859-1 =
http-equiv=3DContent-Type>
<META content=3D'"MSHTML 4.72.3110.7"' name=3DGENERATOR>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT color=3D#000000 size=3D2>I have a problem because my server =
can't receive=20
the client's certificate... I'm not sure if I have a problem in the =
client or in=20
the server.</FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT color=3D#000000 size=3D2>I'm using openssl-0.9.3... I tried =
everything=20
that I read in openssl-users... </FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2></FONT>&nbsp;</DIV>
<DIV><FONT color=3D#000000 size=3D2>Bye,</FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2>&nbsp;Davide</FONT></DIV>
<DIV><FONT color=3D#000000 size=3D2></FONT>&nbsp;</DIV></BODY></HTML>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to