Re: Can't (programmatically) generate browser-compatible SSL certs

[Richard Levitte - VMS Whacker]

From: Rich Salz <[EMAIL PROTECTED]>

rsalz> > make sure you common name ie. www.yahoo.com in the cert is the
rsalz> > resolved dns name you are using to pull up the site. Also make sure
rsalz> > you have a server certificate or intermediate.ca configured.
rsalz> 
rsalz> that's why I attached the data, so folks could see that I did that.
rsalz> 
rsalz> I don't have basic constraints in my CA cert, nor do I have the EMAIL
rsalz> RDN in my subject DN.  I'll try adding those. 

os360.caveosystems.com does not exist according to the zone transfer I
do from ns1[67].verio-web.com...

-- 
Richard Levitte   \ Spannv�gen 38, II \ [EMAIL PROTECTED]
Chairman@Stacken   \ S-168 35  BROMMA  \ T: +46-8-26 52 47
Redakteur@Stacken   \      SWEDEN       \ or +46-709-50 36 10
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/
Software Engineer, Celo Communications: http://www.celocom.com/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]