Re: Renewed CA's own cert, IE still trusted signed sites but firefox does not

2011-12-08 Thread jb-openssl
On 08-12-2011 19:46, Gaiseric Vandal wrote: I am using Openssl 1.0.0a (on Solaris 10) as a basic CA. I use this to sign SSL certificates for various internal servers (web, e-mail etc.) I recently used the "openssl ca" command to renew the CA's machine own public certificate. The modul

Renewed CA's own cert, IE still trusted signed sites but firefox does not

2011-12-08 Thread Gaiseric Vandal
I am using Openssl 1.0.0a (on Solaris 10) as a basic CA. I use this to sign SSL certificates for various internal servers (web, e-mail etc.) I recently used the "openssl ca" command to renew the CA's machine own public certificate. The modulus (public key) of the new certificate is th