But the self signed certificate that has been generated contains the following
X509v3 Basic Constraints: CA:TRUE X509v3 Key Usage: Certificate Sign, CRL Sign Netscape Cert Type: SSL CA, S/MIME CA, Object Signing CA which means that it is a CA certificate. So what else could be the problem. Franck Martin wrote: >My guess, is a self signed certificate is not a CA certificate. In your >openssl.cnf file you should se an option like CA=true, which is used only to >sign CA certificate. > >Cheers. > >Franck Martin >Network and Database Development Officer >SOPAC South Pacific Applied Geoscience Commission >Fiji >E-mail: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> >Web site: http://www.sopac.org/ ><http://www.sopac.org/> Support FMaps: http://fmaps.sourceforge.net/ ><http://fmaps.sourceforge.net/> > >This e-mail is intended for its addresses only. Do not forward this e-mail >without approval. The views expressed in this e-mail may not be necessarily >the views of SOPAC. > > > >-----Original Message----- >From: viswanath [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, 20 November 2001 4:43 >To: openssl users >Subject: Importing Self Signed Cert in Oracle 8i > > >Hi, > trying to import self signed cert in Oracle 8i but it is not >accepting it. Error msg given is "Not a trusted certificate". >But it accepted the versign root certificate. So wat could be the problem? > >thanx, >vish. > >______________________________________________________________________ >OpenSSL Project http://www.openssl.org >User Support Mailing List [EMAIL PROTECTED] >Automated List Manager [EMAIL PROTECTED] >______________________________________________________________________ >OpenSSL Project http://www.openssl.org >User Support Mailing List [EMAIL PROTECTED] >Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]