Robert Hannemann schrieb: > > Robert Hannemann wrote: > > > > Robert Hannemann wrote: > > > > > > Michael Bell wrote: > > > > > > > > Robert Hannemann schrieb: > > > > > > > > > > Good Morning and a short Question: > > > > > > > > > > in the User.ext file is the line: issuerAltName=issuer:copy > > > > > but in the User Cert's this field is empty. Does anybody know why ? > > > > > > > > issuerAltName copies it's value from the subject alternative name of the > > > > isuer certificate. Does the issuer certificate contain a subject > > > > alternative name? > > > yes it does. > > > > sorry for the wrong reply, the issuer certificate doesn't contain the > > subjectAlternativName. > > the problem is, i want to generate a CA Certificate with an E-Mail but > not with the E-Mail in the DN. How to do this ? The CA-Certificate > generation process doesn't need the configure-files ? - but where can i > set the option:CA-Cert DN without the E-Mail ?
There is a simple trick. genCACert uses etc/openssl/openssl.cnf. So you can simply edit the file and enter a hardcoded emailaddress for the subject alternative name and on the webinterface of the CA you enter the DN without an emailaddress. Michael -- ------------------------------------------------------------------- Michael Bell Email (private): [EMAIL PROTECTED] Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 Unter den Linden 6 Fax: +49 (0)30-2093 2959 10099 Berlin Germany http://www.openca.org _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
