Hi,
Add the folowing extensions:
basicConstraints = CA:FALSE nsComment = NewPKI Object/Code Sign Certificate subjectKeyIdentifier = hash authorityKeyIdentifier = keyid:always nsCertType = objsign keyUsage = digitalSignature extendedKeyUsage = codeSigning
I will add a template in the future versions of NewPKI.
Regards, -- Fr�d�ric Giudicelli http://www.newpki.org
Neil Franken wrote:
Hi People
Just a quick question again. I want to create a object/code signing CA. What are the steps necessary for this? I noticed there are no templates for an object signing CA, but there are options if you use the template wizard. Anyway I need to sign ActiveX cab files and would love to test NewPKI in this regard. SO has anyone got some ideas about it ?
Thanks
Neil
_____________________________________________________________________ NewPKI http://www.newpki.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
