gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
Hello. I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage extension to authenticate a client to a server. Plain certificates signed by CA work well. When I'm trying to use gLite-generated proxy certificate, the server responses Unknown ca

gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
Hello. I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage extension to authenticate a client to a server. Plain certificates signed by CA work well. When I'm trying to use gLite-generated proxy certificate, the server responses Unknown ca

Re: gLite proxy certificate support.

2008-03-03 Thread Ian Alderman
On Mon, Mar 03, 2008 at 06:31:47PM +0300, Vladimir Voznesensky wrote: Hello. I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage extension to authenticate a client to a server. Plain certificates signed by CA work well. When I'm trying

Re: gLite proxy certificate support.

2008-03-03 Thread Richard Levitte
In message [EMAIL PROTECTED] on Mon, 03 Mar 2008 18:31:47 +0300, Vladimir Voznesensky [EMAIL PROTECTED] said: vovic Hello. vovic vovic I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage extension to authenticate a client to a server. vovic

Re: gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
Ian, I use glite-voms-proxy-init, but it seems to be the same tool as voms-proxy-init. Ian Alderman wrote: On Mon, Mar 03, 2008 at 06:31:47PM +0300, Vladimir Voznesensky wrote: Hello. I'm trying to use gLite (VOMS) proxy certificates with CN=proxy at the subject tail and X509v3 Key Usage

Re: gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
Dear Richard, Does OpenSSL accept 1.3.6.1.4.1.3536.1.222 extension as proxyCertInfo in CN=1234567890 proxies? Thanks. Richard Levitte wrote: In message [EMAIL PROTECTED] on Mon, 03 Mar 2008 18:31:47 +0300, Vladimir Voznesensky [EMAIL PROTECTED] said: vovic Hello. vovic vovic I'm trying

Re: gLite proxy certificate support.

2008-03-03 Thread Vladimir Voznesensky
I've tried. It seems not to support. Ok, thank you. Vladimir Voznesensky wrote: Dear Richard, Does OpenSSL accept 1.3.6.1.4.1.3536.1.222 extension as proxyCertInfo in CN=1234567890 proxies? Thanks. Richard Levitte wrote: In message [EMAIL PROTECTED] on Mon, 03 Mar 2008 18:31:47 +0300,