Hi Chris,

Chris Covell wrote:

I am after a set of anonymous certificates with no email addresses. The certs will be pre created with user id information in the CN (e.g. 123456abcd) and then issued to users. I have done some testing using the current interfaces and normal user type certs need an email address (and also a subject Alt Name defined). I know that web certs do not need an email.

The subject doesn't need an emailaddress. If you don't like to set the subject alternative name then remove it from OPENCADIR/etc/openssl/extfiles/User.conf. That's all. So I think it is simple :)


Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to