Hello all,

i want to implement the following szenario into OpenCA:

                   RootCA
               /            \
              /              \
        ServerCA             UserCA
        /      \           /       \
       /        \         /         \
    Server1...ServerN   User1 ...  UserN


where the RootCA uses a selfsigned Cert, which signs only the
ServerCA-Request and the UserCA-Request.
With the ServerCA-Key i want to sign only Server-Requests and with the
UserCA-Key i want to sign the User-Requests.

Is there a way to tell OpenCA to use two different CA-Certs, one for
signing User-Requests, the other for the Server-Request? I know that i
can add different Extensions. But i want both (User/Server) handled
seperatly. The certs schoud be stored to different directories, should
use different Serial-Numbers and so on.

Any idea is welcome

Thanks

Sascha

_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to