CA.self

[lqing <lqing@scsti.ac.cn>]

hi....

	I have a question? 
	Now i use ssleay to make a self-sign CA and install it in my server and
load it into my netscape navigator, and i make a client ceitificate to
install it in my navigator,and i changed to httpd.conf like this:

	SSLCACertificatePath /usr/local/ssl/newcerts 
	SSLCertificateFile  /usr/local/ssl/private/CA.cert  
	SSLCertificateKeyFile /usr/local/ssl/private/CA.key
	SSLVerifyClient 2

all clients certificate in dir: /usr/local/ssl/newcerts and CA.cert &
CA.key is ok,now i connect to my server,it give me a error:

	Verification of the selected certificate failed for the 	following
reasons:

	168.160.75.92's scsti.com ID
           Not certified for E-Mail
	lqing@scsti.ac.cn[Certificate Authority]
           Not a valid Certificate Authority
           Certificate not trusted

why? how to make a CA can build client certificate and verificate
itself?