I have a CA of organization X (O=X,C=VN), and I'm setting up another CA for organization Y (O=Y,C=VN).
In Y's CA, Phase I of Initialization, I did "Export CA Certificate Request" and upload careq.pem to X's "PKCS#10 Request Form", but X doesn't allow me, the error is #700: "General Error Your request has to include O=X".
This is a configuration issue - in servers/pub.conf you will find a section about the PKCS10 Request DN_TYPE_PKCS10_ENFORCE_BASE - set this to No and you should be able to sign request of either DN
Oliver
-- Diese Nachricht wurde digital unterschrieben oliwel's public key: http://www.oliwel.de/oliwel.crt Basiszertifikat: http://www.ldv.ei.tum.de/page72
smime.p7s
Description: S/MIME Cryptographic Signature
