Hello to everyone,

I created a client certificate with my own local CA to configure an Apache + 
https but receive the following (ie. when working with subversion using 
https):

...
Error validating server certificate for 'https://acer9100:443':
 - The certificate is not issued by a trusted authority. Use the
   fingerprint to validate the certificate manually!
Certificate information:
 - Hostname: acer9100
 - Valid: from Mar  9 14:29:17 2007 GMT until Mar  8 14:29:17 2010 GMT
 - Issuer: Costacurta.org, Brussels, Brussels Region, BE
... 
Assuming, strictly technically speaking and in the way they're created, that 
thrusted and local CA are identical, I suppose something has to aligned 
between CA and client certificate to avoid this message 'The certificate is 
not issued by a trusted authority'.

Am I correct in this assumption ?
If yes, what (fields and/or policy ?) needs to be aligned or setup ?

Note: If I used my CAcert certificate client (obtained via www.CAcert.org) I 
receive same complain but regarding an invalid hostname which is correct as 
my certificate client reflects my domain costacurta and not my hostname 
acer9100 as defined for Apache.
...
- The certificate hostname does not match.
Certificate information:
 - Hostname: Bruno Costacurta
 - Valid: from Mar  5 13:21:49 2007 GMT until Mar  4 13:21:49 2009 GMT
 - Issuer: http://www.cacert.org, Root CA
...
I make about this message the assumption the problem is linked with the 
configuration and creation of the client certificate, not in the thrusted or 
not status of the CA.

Thanks for any clue or correction.

Bye,
Bruno
-- 
PGP key ID: 0x2e604d51
Key : http://www.costacurta.org/keys/bruno_costacurta_pgp_key.html
Key fingerprint = 713F 7956 9441 7DEF 58ED  1951 7E07 569B 2E60 4D51
--

Attachment: pgp486dGEQYV3.pgp
Description: PGP signature

Reply via email to