Hi Arne , look at www.pseudonym.org/ssl/ Do you have install the root CA in your browser ? cu. hirntod On Sat, 19 Aug 2000, Arne Borkowski (borko.net) wrote: > Hi there everybody, > > does one of you have a hint? > > I want to create my own Primary CA to sign my Server CA > and User CA. That works fine. My server certificates are > working well. > > However, my client certificates cannot be used for client > authentication, as Netscape (4.74) and MSIE (5.01) do not > allow these certificates to be used for client authentication. > > In my openssl.conf I use > > extendedLeyUsage=emailProtection, clientAuth > > MSIE confirms this in the key management, but still doesn't > offer it, when my Linux box "requires SSL authentication". > My VeriSign ID is offered, but is not what I want. > > Any clues? Where could I go possibly wrong? > > > ________________________ > regards, Arne Borkowski > Hamburg > > > > > > ________________________ > Gruss, Arne Borkowski > Hamburg > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
