Hi,
Thanks for that.
So I've run:
openssl pkcs12 -export -in newcert.pem -inkey newreq.pem -out newcert.p12
and that seems to have worked fine. Windows will happily let me import
'newcert.p12' into the certificates store.
However, when I try to use it to sign/encrypt email, 'Outlook Express'
informs me that I don't have a digital ID ( and offers me the opportunity to
procure one from a trusted CA ).
Looking at the 'Details' of my cerificate, I notice there is no 'Key usage'
mentioned ( though there is such an entry on Averroes', for example).
Is this the source of my trouble ? If so, is it easily remedied, or am I
destined to return to the docs and the archives for a few more hours, yet ?
Cheers,
Rob
----- Original Message -----
From: "Averroes" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Monday, August 06, 2001 1:53 AM
Subject: Re: Importing cerificates on Win 2k
> Hi
>
> Just convert the newcertt.pem in pkcs12 format
> and import it into Win2K
>
> Bye!
>
> Sisyphus wrote:
> >
> > Hi,
> > I've just worked through the tutorial on creating a CA and certificate
at:
> > http://www.sendmail.org/~ca/email/other/cagreg.html
> >
> > And I now have 2 files, 'newcert.pem' (the signed certificate) and
> > 'newreq.pem' (unsigned certificate and private key).
> >
> > I believe that everything to that stage worked as it should.
> >
> > I had expected that simply importing 'newcert.pem' to my certificate
store
> > would enable me to digitally sign and encrypt email.
> >
> > Alas, no. For a start, windows complains that this file is not of the
> > correct format and, faik, there may be other issues as well.
> >
> > Could someone please tell me what else I need to do ?
> >
> > I reckon if I can get it working, I might just be able to work out
what's
> > going on :-)
> >
> > Cheers,
> > Rob
> >
> > ______________________________________________________________________
> > OpenSSL Project http://www.openssl.org
> > User Support Mailing List [EMAIL PROTECTED]
> > Automated List Manager [EMAIL PROTECTED]
>
> --
> #----------------------------------------------------------------------
> # Averroes A. Aysha http://www.keyserver.net/en/
> # Think Linux, Think Slackware!
> # Network Security Auditor (NSA)
> # [EMAIL PROTECTED]
> # Fingerprint = 73B7 2559 2968 5094 3B95 5C70 4E85 5F94 6068 1DD8
> #----------------------------------------------------------------------
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
