OK, i have removed the subjectaltname.
Now i have the next problem i can't explain. I Have an email-address in the req, when i issue the req the email-address in the cert is gone ???

What i am doing wrong this time?
Tom

Am Die, 2002-06-11 um 10.49 schrieb Michael Bell:
> Thomas Rupp schrieb:
> 
> But ... when i'm create a cert with the pub interface, approve it with
> the ra export and import it to the ca i can't issue it until i edit
> the subjectaltname in the *.ext file. I think this is not ok.
> What's about this ${env::subjectaltname}.

We don't want to setup the subjectAltName full automatically. So you
must edit the request or remove the subjectAltName from the
OpenSSL-configuration.

If you setup the subject alternative name in OpenCA then we set the
environmentvariable subjectaltname which you can see in the *.ext-files.

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org

_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink

_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
---
byte.box - matzken & rupp gbr
frankfurter strasse 135 - 63303 dreieich
fon: 07000.bytebox - fax: 06103.310369.1
[EMAIL PROTECTED] - www.bytebox.de

Attachment: signature.asc
Description: Dies ist ein digital signierter Nachrichtenteil

Reply via email to