Re: Can i use CA signed cert to create client authentication certificates ?
Jan Stian Gabrielli <[email protected]> Tue, 23 Sep 2008 14:39:16 +0200
| Newsgroups | gmane.comp.apache.mod-ssl.user |
|---|---|
| Message-ID | <[email protected]> |
T2suIFRoaXMgc2VlbXMgbGlrZSBhIHZpYWJsZSBzb2x1dGlvbi4NCkllLg0KSSB1c2UgYW4gYXBw cm92ZWQgQ0Egc2lnbmVkIGNlcnQgdG8gdmVyaWZ5IHRoZSBzaXRlIGF1aHRlbnRpc2l0eSwgYW5k IGkgdXNlIGEgc2VsZnNpZ25lZCBDQSByb290IGZvciBjbGllbnQgY2VydGlmaWNhdGVzLg0KDQpD YW4geW91IHBvaW50IG1lIGluIGEgZGlyZWN0aW9uIG9mIGhvdyBpIG1ha2UgdGhpcyB3b3JrIGlu IGFwYWNoZSA/Lg0KSSBhbHJlYWR5IGhhdmUgYSBzZXR1cCB3aXRoIGEgU2VsZnNpZ25lZCBDQSB3 b3JraW5nIGZvciBjbGllbnQgY2VydGlmaWNhdGVzLg0KDQpDcmVhdGVlZCBTZWxmU2lnbmVkQ0EN CnwtLT5DcmVhdGUgYW5kIFNpZ24gQXBhY2hlIENlcnQgZnJvbSBTZWxmU2lnbmVkIENBDQp8LS0+ Q3JlYXRlIGFuZCBTaWduIENsaWVudCBDZXJ0IGZyb20gU2VsZlNpZ25lZCBDQQ0KDQpIb3cgZG8g SSBpbmNvcnBvcmF0ZSB0aGlzIHdpdGggYSBDQSAodGhhd3RlKSBzaWduZWQgd2Vic2VydmVyIGNl cnRpZmljYXRlID8uDQoNCkJlc3QgcmVnYXJkcw0KDQpXaXpraWRub25vDQoNCk9yaWdpbmFsIE1l c3NhZ2UgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NClNvdW5kcyBsaWtlIHlvdXIgdHJ5aW5nIHRv IHVzZSB0aGUgdGhhd3RlIGFwYWNoZSBjZXJ0IHRvIHNpZ24geW91ciBjbGllbnQgY2VydHM/IFRo ZSB0aGF3dGUgY2VydCB3b24ndCBoYXZlIHRoZSByaWdodCBhdHRyaWJ1dGVzIHRvIHNpZ24gYSBj bGllbnQgY2VydCBhbmQgdGhlbiB0cnkgdG8gdXNlIGl0Lg0KDQpZb3UgY291bGQgdXNlIHlvdXIg Q0EgZm9yIGNsaWVudCBjZXJ0cyBhbmQgVGhhd3RlIGZvciB0aGUgc2VydmVyIGNlcnQuDQoNClJl Z2FyZHMNCk1hdHQNCg0KDQoNCi0tLS0tIE9yaWdpbmFsIE1lc3NhZ2UgLS0tLQ0KRnJvbTogSmFu IFN0aWFuIEdhYnJpZWxsaSA8c3RpYW5AbWFpbHRpbG1lZy5jb20+DQpUbzogbW9kc3NsLXVzZXJz QG1vZHNzbC5vcmcNClNlbnQ6IE1vbmRheSwgU2VwdGVtYmVyIDIyLCAyMDA4IDc6NTQ6MzcgUE0N ClN1YmplY3Q6IENhbiBpIHVzZSBDQSBzaWduZWQgY2VydCB0byBjcmVhdGUgY2xpZW50IGF1dGhl bnRpY2F0aW9uIGNlcnRpZmljYXRlcyA/DQoNCkkgYW0gdHJ5aW5nIHRvIHNldCB1cCBhcGFjaGUg d2l0aCBtb2Rfc3NsICwgYW5kIEkgaGF2ZSBpdCB3b3JraW5nIHdpdGggYQ0KU2VsZiBTaWduZWQg Q0EuDQpCdXQgaSBjYW4gbm90IGdldCBpdCB0byB3b3JrIHdpdGggYSBjZXJ0IGNyZWF0ZWQgYnkg dGhhd3RlLmNvbS4NCg0KRG9lcyBhbnlvbmUga25vdyBpZiBpdCBpcyBwb3NzaWJsZSB0byBkbyB0 aGlzIHdpdGggYSBjcnQgc2lnbmVkIGJ5IGEgInRoaXJkIg0KcGFydHkgd2hlcmUgb25lIGRvZXMg bm90IGhhdmUgYWNjZXNzIHRvIHRoZWlyIHJvb3QgY2Ega2V5ID8uLg0KDQpJZS4NCg0KSSBoYXZl IGdlbmVyYXRlZCBhIDogYXBhY2hlX3NlcnZlci5rZXkgbWFkZSBhIGFwYWNoZV9zZXJ2ZXIuLmNz ciBhbmQgc2VudA0KdGhpcyBmb3Igc2lnbmluZyBieSB0aGF3dGUuY29tDQpSZWNpdmVkIGEgYXBh Y2hlX3NlcnZlci5jcnQNCg0KQ3JlYXRlZCBhIGNsaWVudC5rZXkgYW5kIGEgY2xpZW50LmNzcg0K U2lnbmVkIGl0IHdpdGggbXkgYXBhY2hlX3NlcnZlci5rZXkgYW5kIGFwYWNoZV9zZXJ2ZXIuY3J0 DQoNCkNvbnZlcnRlZCB0aGUgY2xpZW50LmtleSxjcnQgdG8gYSBwa2NzMTIgZmlsZSBhbmQgaW1w b3J0ZWQgdGhpcyBpbnRvIG15DQpicm93c2VyIGJ1dCBpIGNhbiBub3QgbWFrZSB0aGluZ3Mgd29y ay4NCg0KU1NMIHdvcmtzIGZpbmUgb24gdGhlIHNlcnZlciBvbiBwYWdlcyB0aGF0IGRvZXMgbm90 IHJlcXVpcmUgU1NMIGNsaWVudCBhdXRoLg0KDQpBIEkgc3RhdGVkIGVhcmxpZXIsIElUIHdvcmtz IHdoZW4gSSBjcmVhdGUgYW5kIHNlbGYgc2lnbiBhIENBLCBidXQgSSBjYW50DQptYWtlIGl0IHdv cmsgd2hlbiBJIHVzZSBhIDNyZCBwYXJ0eSBDQSBhbmQgb25seSBoYXZlIGFwYWNoZV9zZXJ2ZXIu a2V5LA0KYXBhY2hlX3NlcnZlci5jcnQgLCB0aGF3dGUgcm9vdCBjZXJ0Lg0KDQpCZXN0IHJlZ2Fy ZHMNCg0KV2l6a2lkbm9ubw0K4oCTxZPigKbDoifCtcOqw59pw4fCrSDDql7vv70k4oC5xaHigKFs wrJcMMOCasKyw4lowq4sesK0wq7CpsWhK8K0w4bCouKAkynDoC4rLcWh4oChbMKyW8KsesK7JsKh w5ss4oCTxaDDoMOraOKEosKrXnTCuMKswrTDhsKnasKr4oSiwqjDqMKtw5omwqJqwrLDiWjCrg0K DQoNCiAgICAgIA0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KQXBhY2hlIEludGVyZmFjZSB0byBPcGVuU1NMICht b2Rfc3NsKSAgICAgICAgICAgICAgICAgICB3d3cubW9kc3NsLm9yZw0KVXNlciBTdXBwb3J0IE1h aWxpbmcgTGlzdCAgICAgICAgICAgICAgICAgICAgICBtb2Rzc2wtdXNlcnNAbW9kc3NsLm9yZw0K QXV0b21hdGVkIExpc3QgTWFuYWdlciAgICAgICAgICAgICAgICAgICAgICAgICAgICBtYWpvcmRv bW9AbW9kc3NsLm9yZw0K ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [email protected] Automated List Manager [email protected]