When I made myself a client cert to mess around with client auth, I was able
to get the issuer cert into NS4.7 by importing a pkcs12 that had my client
cert chained with the root cert.

> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> Sent: Monday, July 24, 2000 5:25 AM
> To: [EMAIL PROTECTED]
> Subject: Importing Site Certificates into Netscape
> 
> 
> 
> Whilst investigating what can be done with X-509 
> certificates, it occurred
> to me that maybe having separate, role-based, signing 
> certificates for the
> likes of E-Mail/SSL.  So I went ahead, created my root (no 
> problems), made
> another certificate that was not a CA (but sign-only) and 
> signed that with
> the root and finally created a personal one.  All this 
> imported marvelously
> into Internet Exploder, but when it came time to do the same 
> with Netscrape,
> things fell apart in the middle.
> 
> Is would appear that it is impossible to import a "web server 
> certificate"
> into Netscape without it being served by a web server - 
> correct ?  The MIME
> hack to get the root CA in with a "double click" appears not 
> to work for
> application/x-x509-server-cert.
> 
> Are there any other avenues worth exploring that are likely 
> to bear fruit
> here ?
> 
> Thanks,
> Darren
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]
> 
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to