Re: GlobalID problem

On Mon, Dec 20, 1999 at 10:19:54AM +0100, Matthias Loepfe wrote: [MS-StepUp] Is there a spec for it? http://www.microsoft.com/security/tech/sgc/TechnicalDetails.asp or http://www.microsoft.com/security/tech/sgc Is there more than internal server errors (VBScript runtime errors:

Re: GlobalID problem

Ben Laurie wrote: Matthias Loepfe wrote: Also I think it would probably be a good idea to think about supporting the MS-StepUp in OpenSSL. Is there a spec for it? see http://www.microsoft.com/security/tech/sgc/TechnicalDetails.asp or http://www.microsoft.com/security/tech/sgc

Re: GlobalID problem

Gareth Jones wrote: I did order the certificate for Stronghold, since I guessed this was the closest thing to Apache + mod_ssl. The output from "openssl x509 ..." only mentions the extra Netscape flag, doesn't say anything about a Microsoft flag. X509v3 Extended Key Usage:

Re: GlobalID problem

er 1999 08:40 To: [EMAIL PROTECTED] Subject: Re: GlobalID problem Hi, We had probably the same problem. Please check if your GlobalID Cert has both of the SGC ext. key usage flags set (NS and MS) or only NS. IE chooses a different stepup procedure if the GlobalID Cert contains the MS SGC f

Re: GlobalID problem

Hi, We had probably the same problem. Please check if your GlobalID Cert has both of the SGC ext. key usage flags set (NS and MS) or only NS. IE chooses a different stepup procedure if the GlobalID Cert contains the MS SGC flag, which is not supportet by OpenSSL. This flavour of step up is a

Re: GlobalID problem

Matthias Loepfe wrote: Also I think it would probably be a good idea to think about supporting the MS-StepUp in OpenSSL. Is there a spec for it? Cheers, Ben. -- http://www.apache-ssl.org/ben.html "My grandfather once told me that there are two kinds of people: those who work and those who

RE: GlobalID problem

p, Gareth. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Matthias Loepfe Sent: 02 December 1999 08:40 To: [EMAIL PROTECTED] Subject: Re: GlobalID problem Hi, We had probably the same problem. Please check if your GlobalID Cert has both of the SGC ext. key u

GlobalID problem

Hi, Just wondering if anyone has encountered the following problem with the Verisign SGC GlobalID certificates. I'm running mod_ssl 2.4.8_1.3.9, and have got both the global certificate and the intermediate certificate installed and configured. I can connect with an export version of Netscape

Re: GlobalID problem

Yep, it's (probably) the common name. IE wants it to match the URL... Patrik Gareth Jones wrote: Hi, Just wondering if anyone has encountered the following problem with the Verisign SGC GlobalID certificates. I'm running mod_ssl 2.4.8_1.3.9, and have got both the global certificate and