Am I correct in thinking that the files in ca/OpenCA/etc/openssl/openssl are used for the generation of the certificate requests and that the files in ca/OpenCA/etc/openssl/extfiles are used to add extensions when issuing and signing the certificate?
Yes.
If yes, is it correct that the extfiles are never used at the RA (because we just sign a request and do not issue a certificate and thus do not need to add any extensions)?
Yes.
What are the openssl.cnf, ra-openssl.cnf and ca-openssl.cnf files in ca/OpenCA/etc/openssl used for ?
openssl.cnf is used for the ca-cert and ca-request. ra-openssl.cnf and ca-openssl.cnf are legacy parts of OpenCA. ca-openssl.cnf is the same like openssl.cnf. I will fix it in CVS HEAD.
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
------------------------------------------------------- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging features you've never dreamed of, try TotalView 6 free at www.etnus.com. _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
