Re: Can i use CA signed cert to create client authentication certificates ?
Jan Stian Gabrielli <[email protected]> Thu, 25 Sep 2008 10:37:00 +0200
| Newsgroups | gmane.comp.apache.mod-ssl.user |
|---|---|
| Message-ID | <[email protected]> |
VGhhbmsgeW91IHZlcnkgbXVjaCBNYXR0IC4NClRoYXQgc29sdmVkIGl0IDopLg0KDQpJIG5vdyBo YXZlICJDbGllbnQgQ2VydGlmaWNhdGUgQXV0aGVudGljYXRpb24iIHdvcmtpbmcgd2l0aCBhIENB IHNpZ25lZCBjZXJ0aWZpY2F0ZSBhbmQgYSBTZWxmIFNpZ25lZCBDQSB3aGljaCBpbiB0dXJuIHNp Z25zIGNsaWVudCBjZXJ0cy4NCg0KSWYgaSBjYW4gb25seSBhc2sgZm9yIGEgYml0IG1vcmUgYWR2 aWNlIHJlZ2FyZGluZyB0aGlzIHNldHVwID8uDQpBbHRob3VnaCBJIHRoaW5rIHRoaXMgcHJvYmxl bSBtaWdodCBiZSBGaXJlZm94IHNwZWNpZmljIEknbSBob3BpbmcgZm9yIHNvbWUgYWR2aWNlIGhl cmUuIA0KDQpJbnRlcm5ldCBFeHBsb3JlciBoYW5kbGVzIHRoZSBjbGllbnQgY2VydGlmaWNhdGVz IGZpbmUsIHByb21wdHMgbWUgdG8gc2VsZWN0IGNlcnRpZmljYXRlIG9uIGNvbm5lY3Rpb24gdG8g dGhlIHNpdGUgYW5kIGJhc2ljYWxseSBqdXN0IHdvcmtzIGFmdGVyIHRoYXQuLg0KDQpCdXQgd2hl biBGaXJlZm94IGlzIHNldCB0byAiQXNrIG1lIGV2ZXJ5IHRpbWUiIGluc3RlYWQgb2YgImF1dG8g c2VsZWN0IGNsaWVudCBjZXJ0aWZpY2F0ZSIgSSBrZWVwIGdldHRpbmcgdGhlIHNlbGVjdCBjZXJ0 aWZpY2F0ZSBwb3AgdXAgc2V2ZXJhbChtdWx0aXBsZSkgdGltZXMgcGVyIHBhZ2UgcmVxdWVzdC9s b2FkIGZyb20gdGhlIFNTTCBzZWN1cmVkIEFwYWNoZSBzZXJ2ZXIuDQpUaGVyZSBpcyBvbmx5IG9u ZSBjZXJ0aWZpY2F0ZSBpbiB0aGUgc2VsZWN0IGZyb20gZGlhbG9nLCBidXQgaXQga2VlcHMgcHJv bXB0aW5nIG1lIGFuZCBJIGNhbiBzZWUgaXQgbG9hZGluZyAib25lIiBhbmQgIm9uZSIgaXRlbShp bWFnZSkgb24gdGhlIHdlYnNpdGUuDQpJZiBpIHN3aXRjaCB0byAiQXV0byBzZWxlY3QgY2VydGlm aWNhdGUiIGl0IHdvcmtzLiBCdXQgaXQgd291bGQgYmUgbmljZSBub3QgaGF2aW5nIHRoZSBicm93 c2VyIHByZXNlbnQgdGhlIGNlcnRpZmljYXRlIHdpdGhvdXQgaXQgYmVpbmcgdGhlIHVzZXJzIGNo b2ljZS4gQW5kIGhvbmVzdGx5LCBjaG9vc2luZyBpdCBvbmNlIHBlciBzZXNzaW9uIHBlciBzaXRl IHNob3VsZCBiZSBzdWZmaWNpZW50DQogDQpJIHNob3VsZCBwcm9iYWJseSBtZW50aW9uIHRoYXQg dGhlIHBhZ2Ugc2VydmVkIHVwIGlzIGJlaGluZCBhIG1vZF9wcm94eSBtb2R1bGUuIEJ1dCB0aGlz IGNvbnRlbnQgc2hvdWxkIG5vdCBkaWZmZXIgZm9yIEZpcmVmb3gsIGFuZCBjZXJ0aWZpY2F0ZSBz ZWxlY3Rpb24uIE9yIGRvZXMgdGhlIG1vZF9zc2wgbW9kdWxlIHByb21wdCBmb3IgYSBjbGllbnQg Y2VydGlmaWNhdGUgZm9yIGVhY2ggaXRlbSBsb2FkZWQgPw0KDQpJIGhhdmUgZ29vZ2xlZCB0aGlz IGJ1dCBjYW4ndCBmaW5kIGFueSBnb29kIGFuc3dlcnMuDQpTb21lIHNheSBpdCBpcyBiZWNhdXNl IG9mIGltYWdlIG9iamVjdHMgbG9hZGluZy4gYnV0IHdoeS4gDQogDQpCZXN0IHJlZ2FyZHMNCg0K SmFuIFN0aWFuIEdhYnJpZWxsaQ0KDQpPcmlnaW5hbCBNZXNzYWdlIC0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQpIaSwNCg0KQmFzaWNhbGx5Li4uDQoNClNTTENBQ2VydGlmaWNhdGVGaWxlIFNlbGZT aWduZWRDQSBSb290IENlcnQgKHB1YmxpYyBwYXJ0KQ0KU1NMVmVyaWZ5Q2xpZW50IHJlcXVpcmUg b3Igb3B0aW9uYWwNClNTTFZlcmlmeURlcHRoIDEgKGRlZmF1bHQpDQoNCmFuZCBoYXZlIHRoZSBz ZXR1cCBmcm9tIHRoZSBUaHdhdGUgY2VydCBhcyBwZXIgbm9ybWFsIGZvciB0aGUgc2VydmVyIGNl cnQuDQoNClJlZ2FyZHMNCk1hdHQNCg0KLS0tLS0gT3JpZ2luYWwgTWVzc2FnZSAtLS0tDQpGcm9t OiBKYW4gU3RpYW4gR2FicmllbGxpIDxzdGlhbkBtYWlsdGlsbWVnLmNvbT4NClRvOiBtb2Rzc2wt dXNlcnNAbW9kc3NsLm9yZw0KU2VudDogVHVlc2RheSwgU2VwdGVtYmVyIDIzLCAyMDA4IDE6Mzk6 MTYgUE0NClN1YmplY3Q6IFJlOiBDYW4gaSB1c2UgQ0Egc2lnbmVkIGNlcnQgdG8gY3JlYXRlIGNs aWVudCBhdXRoZW50aWNhdGlvbiBjZXJ0aWZpY2F0ZXMgPw0KDQpPay4gVGhpcyBzZWVtcyBsaWtl IGEgdmlhYmxlIHNvbHV0aW9uLg0KSWUuDQpJIHVzZSBhbiBhcHByb3ZlZCBDQSBzaWduZWQgY2Vy dCB0byB2ZXJpZnkgdGhlIHNpdGUgYXVodGVudGlzaXR5LCBhbmQgaSB1c2UgYSBzZWxmc2lnbmVk IENBIHJvb3QgZm9yIGNsaWVudCBjZXJ0aWZpY2F0ZXMuDQoNCkNhbiB5b3UgcG9pbnQgbWUgaW4g YSBkaXJlY3Rpb24gb2YgaG93IGkgbWFrZSB0aGlzIHdvcmsgaW4gYXBhY2hlID8uDQpJIGFscmVh ZHkgaGF2ZSBhIHNldHVwIHdpdGggYSBTZWxmc2lnbmVkIENBIHdvcmtpbmcgZm9yIGNsaWVudCBj ZXJ0aWZpY2F0ZXMuDQoNCkNyZWF0ZWVkIFNlbGZTaWduZWRDQQ0KfC0tPkNyZWF0ZSBhbmQgU2ln biBBcGFjaGUgQ2VydCBmcm9tIFNlbGZTaWduZWQgQ0ENCnwtLT5DcmVhdGUgYW5kIFNpZ24gQ2xp ZW50IENlcnQgZnJvbSBTZWxmU2lnbmVkIENBDQoNCkhvdyBkbyBJIGluY29ycG9yYXRlIHRoaXMg d2l0aCBhIENBICh0aGF3dGUpIHNpZ25lZCB3ZWJzZXJ2ZXIgY2VydGlmaWNhdGUgPy4NCg0KQmVz dCByZWdhcmRzDQoNCldpemtpZG5vbm8NCg0KT3JpZ2luYWwgTWVzc2FnZSAtLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KU291bmRzIGxpa2UgeW91ciB0cnlpbmcgdG8gdXNlIHRoZSB0aGF3dGUgYXBh Y2hlIGNlcnQgdG8gc2lnbiB5b3VyIGNsaWVudCBjZXJ0cz8gVGhlIHRoYXd0ZSBjZXJ0IHdvbid0 IGhhdmUgdGhlIHJpZ2h0IGF0dHJpYnV0ZXMgdG8gc2lnbiBhIGNsaWVudCBjZXJ0IGFuZCB0aGVu IHRyeSB0byB1c2UgaXQuDQoNCllvdSBjb3VsZCB1c2UgeW91ciBDQSBmb3IgY2xpZW50IGNlcnRz IGFuZCBUaGF3dGUgZm9yIHRoZSBzZXJ2ZXIgY2VydC4NCg0KUmVnYXJkcw0KTWF0dA0KDQoNCg0K LS0tLS0gT3JpZ2luYWwgTWVzc2FnZSAtLS0tDQpGcm9tOiBKYW4gU3RpYW4gR2FicmllbGxpIDxz dGlhbkBtYWlsdGlsbWVnLmNvbT4NClRvOiBtb2Rzc2wtdXNlcnNAbW9kc3NsLm9yZw0KU2VudDog TW9uZGF5LCBTZXB0ZW1iZXIgMjIsIDIwMDggNzo1NDozNyBQTQ0KU3ViamVjdDogQ2FuIGkgdXNl IENBIHNpZ25lZCBjZXJ0IHRvIGNyZWF0ZSBjbGllbnQgYXV0aGVudGljYXRpb24gY2VydGlmaWNh dGVzID8NCg0KSSBhbSB0cnlpbmcgdG8gc2V0IHVwIGFwYWNoZSB3aXRoIG1vZF9zc2wgLCBhbmQg SSBoYXZlIGl0IHdvcmtpbmcgd2l0aCBhDQpTZWxmIFNpZ25lZCBDQS4NCkJ1dCBpIGNhbiBub3Qg Z2V0IGl0IHRvIHdvcmsgd2l0aCBhIGNlcnQgY3JlYXRlZCBieSB0aGF3dGUuY29tLg0KDQpEb2Vz IGFueW9uZSBrbm93IGlmIGl0IGlzIHBvc3NpYmxlIHRvIGRvIHRoaXMgd2l0aCBhIGNydCBzaWdu ZWQgYnkgYSAidGhpcmQiDQpwYXJ0eSB3aGVyZSBvbmUgZG9lcyBub3QgaGF2ZSBhY2Nlc3MgdG8g dGhlaXIgcm9vdCBjYSBrZXkgPy4uDQoNCkllLg0KDQpJIGhhdmUgZ2VuZXJhdGVkIGEgOiBhcGFj aGVfc2VydmVyLmtleSBtYWRlIGEgYXBhY2hlX3NlcnZlci4uY3NyIGFuZCBzZW50DQp0aGlzIGZv ciBzaWduaW5nIGJ5IHRoYXd0ZS5jb20NClJlY2l2ZWQgYSBhcGFjaGVfc2VydmVyLmNydA0KDQpD cmVhdGVkIGEgY2xpZW50LmtleSBhbmQgYSBjbGllbnQuY3NyDQpTaWduZWQgaXQgd2l0aCBteSBh cGFjaGVfc2VydmVyLmtleSBhbmQgYXBhY2hlX3NlcnZlci5jcnQNCg0KQ29udmVydGVkIHRoZSBj bGllbnQua2V5LGNydCB0byBhIHBrY3MxMiBmaWxlIGFuZCBpbXBvcnRlZCB0aGlzIGludG8gbXkN CmJyb3dzZXIgYnV0IGkgY2FuIG5vdCBtYWtlIHRoaW5ncyB3b3JrLg0KDQpTU0wgd29ya3MgZmlu ZSBvbiB0aGUgc2VydmVyIG9uIHBhZ2VzIHRoYXQgZG9lcyBub3QgcmVxdWlyZSBTU0wgY2xpZW50 IGF1dGguDQoNCkEgSSBzdGF0ZWQgZWFybGllciwgSVQgd29ya3Mgd2hlbiBJIGNyZWF0ZSBhbmQg c2VsZiBzaWduIGEgQ0EsIGJ1dCBJIGNhbnQNCm1ha2UgaXQgd29yayB3aGVuIEkgdXNlIGEgM3Jk IHBhcnR5IENBIGFuZCBvbmx5IGhhdmUgYXBhY2hlX3NlcnZlci5rZXksDQphcGFjaGVfc2VydmVy LmNydCAsIHRoYXd0ZSByb290IGNlcnQuDQoNCkJlc3QgcmVnYXJkcw0KDQpXaXpraWRub25vDQrD ouKCrOKAnMOF4oCcw6LigqzCpsODwqInw4LCtcODwqrDg8W4acOD4oChw4LCrSDDg8KqXsOvwr/C vSTDouKCrMK5w4XCocOi4oKswqFsw4LCslwww4PigJpqw4LCssOD4oCwaMOCwq4sesOCwrTDgsKu w4LCpsOFwqErw4LCtMOD4oCgw4LCosOi4oKs4oCcKcODIC4rLcOFwqHDouKCrMKhbMOCwrJbw4LC rHrDgsK7JsOCwqHDg+KAuizDouKCrOKAnMOFIMODIMODwqtow6LigJ7CosOCwqtedMOCwrjDgsKs w4LCtMOD4oCgw4LCp2rDgsKrw6LigJ7CosOCwqjDg8Kow4LCrcODxaEmw4LComrDgsKyw4PigLBo w4LCrg0KDQoNCiAgICAgIA0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQXBhY2hlIEludGVyZmFjZSB0byBPcGVu U1NMIChtb2Rfc3NsKSAgICAgICAgICAgICAgICAgIHd3dy5tb2Rzc2wub3JnDQpVc2VyIFN1cHBv cnQgTWFpbGluZyBMaXN0ICAgICAgICAgICAgICAgICAgICAgIG1vZHNzbC11c2Vyc0Btb2Rzc2wu b3JnDQpBdXRvbWF0ZWQgTGlzdCBNYW5hZ2VyICAgICAgICAgICAgICAgICAgICAgICAgICAgIG1h am9yZG9tb0Btb2Rzc2wub3JnDQrigJPFk+KApsOiJ8K1w6rDn2nDh8KtIMOqXu+/vSTigLnFoeKA oWzCslwww4JqwrLDiWjCrix6wrTCrsKmxaErwrTDhsKi4oCTKcOgListxaHigKFswrJbwqx6wrsm wqHDmyzigJPFoMOgw6to4oSiwqtedMK4wqzCtMOGwqdqwqvihKLCqMOowq3DmibComrCssOJaMKu DQoNCg0KICAgICAgDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQpBcGFjaGUgSW50ZXJmYWNlIHRvIE9wZW5TU0wg KG1vZF9zc2wpICAgICAgICAgICAgICAgICAgIHd3dy5tb2Rzc2wub3JnDQpVc2VyIFN1cHBvcnQg TWFpbGluZyBMaXN0ICAgICAgICAgICAgICAgICAgICAgIG1vZHNzbC11c2Vyc0Btb2Rzc2wub3Jn DQpBdXRvbWF0ZWQgTGlzdCBNYW5hZ2VyICAgICAgICAgICAgICAgICAgICAgICAgICAgIG1ham9y ZG9tb0Btb2Rzc2wub3JnDQo= ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [email protected] Automated List Manager [email protected]