Steve.
>No, its a problem with IIS: see my PKCS#12 FAQ. You need to install the
>CA certificate in IIS so it can tell IE5.0 that it will accept a client
>certificate from that CA. IE5 will only let you select a certificate
>from the list of CAs a server sends.
>
I read your PKCS#12, it is very intresting, i read all about IIS, but my IIS
dont want to accept the CACART of CA created with OPENSSL, i DONT KNOW what
to do
I do all that read in the IIS help file but it dont work i read this :
>>Server Installation of CA Certificates
>>Servers that wish to perform authentication of clients must obtain and
install a Certificate Authority (CA) >>certificate provided by the CA that
issues the client certificates. The CA certificate is needed by the server
>>to validate the client certificates.
>>
>>Microsoft® Internet Information Server (IIS) uses CA certificates that are
stored in the same location in the >>system registry as Microsoft Internet
Explorer. The procedure for installing CA certificates for use by IIS is to
>>load Internet Explorer on the same machine and use it to install the CA
certificates just as you would on a >>client machine. For a detailed
description of this process see Browser Installation of CA Certificates.
After >>the CA certificate is installed, restart IIS in order for the
certificate to be used.
>>
>>Netscape Enterprise Server has a user interface for installing the CA
certificate for the CA issuing a server >>certificate as part of the server
certificate installation process. For more information see Netscape Web
>>Server Certification.
>>
>>Netscape FastTrack Server does not include a user interface to install new
Microsoft Certificate Server CA >>certificates, and cannot participate in
client or server authentication with locally generated certificates.
>>
>>
>>--------------------------------------------------------------------------
------
>>© 1997 by Microsoft Corporation. All rights reserved.
I want to use the Certificate issues by my OPENSSL CA with my IIS server. i
hope that someone can help me.
I have been working in Create CERTIFICATE to do client authenticate with IIS
in a project of on-line shop but it dont work, i am desparate
Thank in advances
Raul Gutierrez
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
