Hello, I'm trying to get a client certificate for MS IE5. I created one for Mozilla/NN6 using sh ../apps/CA.sh -newca sh ../apps/CA.sh -newreq sh ../apps/CA.sh -signreq openssl pkcs12 -export -in newcert.pem -inkey newreq.pem -certfile demoCA/cacert.pem -name "myname" -out client.p12 and that works fine . IE however insists upon a CRL. I tried to create a CRL by: openssl ca -gencrl -out crl.pem -cert demoCA/cacert.pem -crldays 365 openssl crl -in crl.pem -out client.crl -outform DER but that fails to impress IE5. what am I missing ? wlg _____________________________________________________________________________________ Get more from the Web. FREE MSN Explorer download : http://explorer.msn.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
