Package: tinyca
Version: 0.6.7-1
Severity: wishlist

All server certificates I create have hostmaster@ followed by the
common name as the email address. It would be great if I could
somehow specify that as a default.

Moreover, I note that the organisational unit field of a new CSR
defaults to the organisational unit of the CA. However, in most
cases, the two will be different: the CA's OU is the IT department
(or CA department), while the OU of the server certificate usually
depends on where the server is located, and thus may be "Accounting"
or whatever.

The same applies to the other fields of the distinguished name: the
CA values are used as defaults. Most my servers are in other cities
than where the CA is located, so I have to change a lot of fields.

Why did you make the CA's DN be the default? Why not provide
defaults for client and server certificates (individually) via the
preferences?

Thanks,

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (600, 'testing'), (98, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-k7
Locale: LANG=en_GB, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)

Versions of packages tinyca depends on:
ii  libgnome-perl                 0.7009-1.1 Perl module for the gnome and zvt 
ii  libgtk-perl                   0.7009-1.1 Perl module for the gtk+ library
ii  liblocale-gettext-perl        1.01-17    Using libc functions for internati
ii  openssl                       0.9.7e-2   Secure Socket Layer (SSL) binary a
ii  perl [libmime-base64-perl]    5.8.4-5    Larry Wall's Practical Extraction 

-- no debconf information

-- 
 .''`.     martin f. krafft <[EMAIL PROTECTED]>
: :'  :    proud Debian developer, admin, user, and author
`. `'`
  `-  Debian - when you have better things to do than fixing a system
 
Invalid/expired PGP subkeys? Use subkeys.pgp.net as keyserver!

Attachment: signature.asc
Description: Digital signature

Reply via email to