Unsupported_certificate_purpose

------=_Part_8028_11432015.1208851072901
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,



For a project at our company we have a test setup where a (Java) TestClient
(soapui) connects over HTTPS (mutual authentication) to a Apache WebServer
with modssl loaded. During the test phase we used a self signed certificate
(generated with Java keytool). No problem here.

For the production phase we generated a Keypair and sent out a CSR (using
the Java keytool) to a CA. After having received the certificates from the
CA we imported them in the Java keystore under the same alias as the one we
generated the CSR with.

But when connecting to the Apache WebServer we receive an error:

1) Apache logs mentions this: "unsupported_certificate_purpose"
2) Java application mentions this: SSLHandshakeException:
"unsupported_certificate"


Any help on this matter would be greatly appreciated.




Kind regards,



Luc Neulens

------=_Part_8028_11432015.1208851072901
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi,



For a project at our company we have a test setup where a (Java) TestClient (soapui) connects over HTTPS (mutual authentication) to a Apache WebServer with modssl loaded. During the test phase we used a self signed certificate (generated with Java keytool). No problem here.


For the production phase we generated a Keypair and sent out a CSR (using the Java keytool) to a CA. After having received the certificates from the CA we imported them in the Java keystore under the same alias as the one we generated the CSR with.


But when connecting to the Apache WebServer we receive an error:

1) Apache logs mentions this: "unsupported_certificate_purpose"
2) Java application mentions this: SSLHandshakeException: "unsupported_certificate"



Any help on this matter would be greatly appreciated.




Kind regards,



Luc Neulens







------=_Part_8028_11432015.1208851072901--
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org