But the self signed certificate that has been generated contains the 
following

X509v3 Basic Constraints:
                CA:TRUE
X509v3 Key Usage:
                Certificate Sign, CRL Sign
 Netscape Cert Type:
                SSL CA, S/MIME CA, Object Signing CA

which means that it is a CA certificate.
So what else could be the problem.



Franck Martin wrote:

>My guess, is a self signed certificate is not a CA certificate. In your
>openssl.cnf file you should se an option like CA=true, which is used only to
>sign CA certificate.
>
>Cheers.
>
>Franck Martin
>Network and Database Development Officer
>SOPAC South Pacific Applied Geoscience Commission
>Fiji
>E-mail: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> 
>Web site: http://www.sopac.org/
><http://www.sopac.org/> Support FMaps: http://fmaps.sourceforge.net/
><http://fmaps.sourceforge.net/> 
>
>This e-mail is intended for its addresses only. Do not forward this e-mail
>without approval. The views expressed in this e-mail may not be necessarily
>the views of SOPAC.
>
>
>
>-----Original Message-----
>From: viswanath [mailto:[EMAIL PROTECTED]]
>Sent: Tuesday, 20 November 2001 4:43 
>To: openssl users
>Subject: Importing Self Signed Cert in Oracle 8i
>
>
>Hi,
>      trying to import self signed cert in Oracle 8i but it is not
>accepting it. Error msg given is "Not a trusted certificate".
>But it accepted the versign root certificate. So wat could be the problem?
>
>thanx,
>vish.
>
>______________________________________________________________________
>OpenSSL Project                                 http://www.openssl.org
>User Support Mailing List                    [EMAIL PROTECTED]
>Automated List Manager                           [EMAIL PROTECTED]
>______________________________________________________________________
>OpenSSL Project                                 http://www.openssl.org
>User Support Mailing List                    [EMAIL PROTECTED]
>Automated List Manager                           [EMAIL PROTECTED]
>



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to