On Aug 10, 2012, at 1:36 PM, Rob Crittenden wrote:

> What is the value of creating two CA's? If you have one infrastructure, why 
> not have one CA and issue all certificates from that one CA?

Unless there is a step missing from page 4, I think the idea was that CA2 isn't 
in the certs directory, but the first CA is. Therefore, the Other Server 
certificate generated from CA2 wouldn't be recognized as valid. Not sure if the 
test covers all of the various combinations of certificate verification, though.
_______________________________________________
Nut-upsdev mailing list
[email protected]
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/nut-upsdev

Reply via email to