Hello to everyone, I created a client certificate with my own local CA to configure an Apache + https but receive the following (ie. when working with subversion using https):
... Error validating server certificate for 'https://acer9100:443': - The certificate is not issued by a trusted authority. Use the fingerprint to validate the certificate manually! Certificate information: - Hostname: acer9100 - Valid: from Mar 9 14:29:17 2007 GMT until Mar 8 14:29:17 2010 GMT - Issuer: Costacurta.org, Brussels, Brussels Region, BE ... Assuming, strictly technically speaking and in the way they're created, that thrusted and local CA are identical, I suppose something has to aligned between CA and client certificate to avoid this message 'The certificate is not issued by a trusted authority'. Am I correct in this assumption ? If yes, what (fields and/or policy ?) needs to be aligned or setup ? Note: If I used my CAcert certificate client (obtained via www.CAcert.org) I receive same complain but regarding an invalid hostname which is correct as my certificate client reflects my domain costacurta and not my hostname acer9100 as defined for Apache. ... - The certificate hostname does not match. Certificate information: - Hostname: Bruno Costacurta - Valid: from Mar 5 13:21:49 2007 GMT until Mar 4 13:21:49 2009 GMT - Issuer: http://www.cacert.org, Root CA ... I make about this message the assumption the problem is linked with the configuration and creation of the client certificate, not in the thrusted or not status of the CA. Thanks for any clue or correction. Bye, Bruno -- PGP key ID: 0x2e604d51 Key : http://www.costacurta.org/keys/bruno_costacurta_pgp_key.html Key fingerprint = 713F 7956 9441 7DEF 58ED 1951 7E07 569B 2E60 4D51 --
pgp486dGEQYV3.pgp
Description: PGP signature