Thanks for the help you rendered: the tstclnt.exe is taking the
hostname input just fine...

But now I have problems with server authentication: I tried many hit-&-
trial approaches to obtain a successful connection but for one reason
or the other, the client is not recognising the issuer CA(self-signed
and added to the client DB with certutil -t "CTU, CTU, CTU") as
trusted.

I created three DB directories: one for each, the client, the server &
the CA. The DBs, keys, and the certificates requests as well as the
finished certificates of each one was put into its respective
directory. Also, when I created the Self-signed CA certificate using
the -S argument with certutil.exe, it got added to the DB fine but was
not visible in its directory due to which I could not add it to the
client & the server databases. I fixed this problem by creating a
secondary CA cert from the Self signed "root" cert and adding it to
both the other databases...But again it could not recognize the CA
cert... :-((

Then I generated all the certs in a common directory. Again, no
success...

Kindly help.

Also please tell the importance of the -1234567 arguments in the
certutil tool.

Can I somehow add the root CA cert in the client-server DBs without
having to create the secondary CA cert??

Warm Regards,
D3|\||\|!$

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to