You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jason Pyeron <jp...@pdinc.us> on 2015/03/08 16:27:09 UTC

[users@httpd] Trouble shooting: Certificate Verification: Error (26): unsupported certificate purpose

I have a user who keeps causing a "Certificate Verification: Error (26): unsupported certificate purpose" to show up in the SSL error log.

My goal is to allow this certificate as I cannot force a change in it.

Suggestions?

The offending cert is below:

        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Non Repudiation
            X509v3 Certificate Policies:
                Policy: 2.16.840.1.101.3.2.1.3.7
                Policy: 2.16.840.1.101.3.2.1.5.4

            X509v3 Extended Key Usage:
                E-mail Protection, Any Extended Key Usage

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00.


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org