its not a problem that windows says about the client certificate :<br>&quot;the issuer of this certificate cannot be found &quot; ?<br><br>can the certificate be used in this case ?<br><br><div><span class="gmail_quote">On 25/01/2008, <b class="gmail_sendername"><a href="mailto:tnt@kalik.co.yu">tnt@kalik.co.yu</a></b> &lt;<a href="mailto:tnt@kalik.co.yu">tnt@kalik.co.yu</a>&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
&gt;2)or only ca certificate + client certificate ?<br>&gt;<br>&gt;the second case the linkage between the ca and client doesnt exist ( as you<br>&gt;said &quot;is the server the issuer of the client`s certificate&quot; ).<br>
&gt;<br><br>Link is not needed. Server checks the client certificate to see if it&#39;s<br>issued by the server (certificate). Client checks server certificate to<br>see if it&#39;s issued by a *known and trusted&quot; CA. Nothing checks client<br>
certificate against the CA.<br><br>Ivan Kalik<br>Kalik Informatika ISP<br><br>-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br>
</blockquote></div><br>