Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 May 2000 21:02:54 -0700 (PDT)
From:      Kris Kennaway <kris@FreeBSD.org>
To:        Forrest Aldrich <forrie@navipath.com>
Cc:        Steve Price <sprice@hiwaay.net>, current@FreeBSD.ORG
Subject:   Re: RSA decrypt problems
Message-ID:  <Pine.BSF.4.21.0005052100070.28523-100000@freefall.freebsd.org>
In-Reply-To: <20000505235447.H13732@drama.navipath.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 5 May 2000, Forrest Aldrich wrote:

> Okay, I just did, using MS Explorer 5 and it worked with no problems.
> So, this is related to Netscape-4.72.  But is it a bug on their part,
> or something else?

I'm suspecting it might be something missing in the ASN.1 encoding of the
certificate, which netscape requires but IE permits. This would be
consistent with a missing openssl.cnf file at the time of certificate
generation. Could one of you try copying the openssl.cnf file from
crypto/openssl/apps/ to /etc/ssl (editing as appropriate) and see if that
fixes it (i.e. make a new certificate and test it in the same way)?

Kris

----
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe@alum.mit.edu>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0005052100070.28523-100000>