Bcc:
Subject: Re: certpatch on obsd 3.8
Reply-To: [EMAIL PROTECTED]
In-Reply-To: <[EMAIL PROTECTED]>
> i can use this (but without success :-( ):
>
> # openssl x509 -req -days 730 -in /etc/isakmpd/private/${new_cert}.csr -CA
> $CA_crt -CAkey $CA_key -CAcreateserial -extfile /etc/ssl/x509v3.cnf
> -extensions x509v3_UFQDN -out /etc/isakmpd/certs/${new_cert}.crt
>
> with this in x509v3.cnf
> # default settings
> CERTUFQDN = "what i have to give there ??!!"
>
> [x509v3_UFQDN]
> subjectAltName=email:$ENV::CERTUFQDN
something like this
# env [EMAIL PROTECTED] openssl x509 -req -days 730 -in \
/etc/isakmpd/private/${new_cert}.csr -CA $CA_crt -CAkey $CA_key \
-CAcreateserial -extfile /etc/ssl/x509v3.cnf -extensions \
x509v3_UFQDN -out /etc/isakmpd/certs/${new_cert}.crt
--
Mathieu Sauve-Frankel
