Quoting "Michael J. Maravillo" <[EMAIL PROTECTED]>:


> Pardon me if this doesn't really answer the question... Though,
> here's what I do when I create my own private CA and private
> certificate for my web server.

Thank you.  BTW these steps are all in the mod_ssl tutorial/manual,
and I have tried this also, together with the 
"make certificate TYPE=custom" of apache/ssl.  The latter just
makes the process "quick", and automatically installs the certificate,
the csr, and the key in the directories ssl.crt, ssl.csr, ssl.key,
respectively.

> Country Name (2 letter code) [AU]:PH
> State or Province Name (full name) [Some-State]:Metro Manila
> Locality Name (eg, city) []:Quezon Cityscaop
> Organization Name (eg, company) [Internet Widgits Pty Ltd]:XYZ Company
> Organizational Unit Name (eg, section) []:XYZ Web Department
> Common Name (eg, YOUR name) []:www.xyz.foo
> Email Address []:[EMAIL PROTECTED]

Here you chose CN=fqdn, which I tried in many of my experiments, but for
some reason the one with O=fqdn works for Netscape 4.72 browsers.

If you connect to my site http://mail.ateneo.net, and click on the
"secure" link, you will see the server certificate.  This one works
with Netscape 4.72 and IE 5.0(?).

//PMana


-------------------------------------------------
This mail sent through IMP: mail.ateneo.net

-
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

Reply via email to