Dmitrij Mironov wrote:
1. Not important one (but I'm asking it one more time): is it possible to set "friendly name" of certificates? openssl can set it by command -name "...", but how to do that with OpenCA?
-name is only a parameter. Which command do you use? If you use it with "ca" then you only specify the configuration section which should be used for the certificate generation.
2. Important one. We want to change names of certificates Roles and add some new ones. But how we can do this? Roles is listed in /OpenCA/etc/rbac/roles.xml but where is configuration for that roles? Signature alghoritms, extensions, etc.?
There is a tab "configuration" on the CA where you can select "roles". You can add a new role on the displayed page. If you want to do this manually you have to add the role to etc/rbac/roles.xml. Additionaly you have to add the appropriate files to etc/openssl/openssl/ and etc/openssl/extfiles. That's all.
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
------------------------------------------------------- This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and evaluate today! http://www.installshield.com/Dev2Dev/0504 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
