iis security: Can i make personal ssl cert from verisign's one? -- iis security

Re: Can i make personal ssl cert from verisign's one?

heingray NO[at]SPAM gmail.com
7/2/2006 5:48:05 PM

How can i classify it?

Every cert not rejected when i signing with openssl even if
that does not work.

I found simple solution of it. just click the lock icon, export
current level cert to file and click the exported file.

You will meet some kind of error (usually root ca doesn't show up)
or valid one but almost expired.

Try https://verisign.com

However, i cannot classify OID that you said.

Could you help me to find out that?

Thanks in advance.

[quoted text, click to view]

Re: Can i make personal ssl cert from verisign's one?

Ken Schaefer
7/3/2006 12:00:00 AM

The purposes that a certificate can be used for are determined by the
issuing CA. If a certificate is issued for server-authentication, you can't
use it for other purposes. The OIDs for a certificate are available via the
Certificate Manager MMC snapin (Start -> Run -> certmgr.msc)

Cheers
Ken

[quoted text, click to view]

Re: Can i make personal ssl cert from verisign's one?

heingray NO[at]SPAM gmail.com
7/3/2006 6:40:37 PM

I understand what you say.

but, I'm talking about Non-root CA signing.

I can make cert from non-permitted cert.

there is some limitation.

1. original cert must be use Intermediate (cert chain)
single-root cert is not working.

2. original cert must be valid when i double-clicked that
in windows.

example)
expired one: http://user.chol.com/~mirror/t1.cer
valid one: http://user.chol.com/~mirror/t2.cer

thanks in advance.

[quoted text, click to view]

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages in the iis security group.