Hello Jorge,

You have to edit the config file of the public
interface (etc/servers/pub.conf), there you can
stablish the "politics" about the fields that the
request must or may have in the dn. You can configure
this depending on the kind of requests you are
managing, for example, this is a excerpt of the
section for pkcs#10:


DN_TYPE_PKCS10_REQUIRED_ELEMENTS "CN" "OU" "O" "C"
DN_TYPE_PKCS10_BASE     "O" "C"

## YES, EXIST, NO
DN_TYPE_PKCS10_ENFORCE_BASE "EXIST"

DN_TYPE_PKCS10_BASE_1 "Ubiquando"
DN_TYPE_PKCS10_BASE_2 "CO"



these lines mean:
the required elements: CN, OU, O y C

where O and C are required and must contain Ubiquando
and CO

configure this to reflect your politics and it will be
done :-)

Hope this helps you,
Johnny


 --- Jorge Davila <[EMAIL PROTECTED]> escribi�:

> Hello all:
> 
> I face this error:
> 
> Error 700 General Error Your request has to include
> C=US.
>                         
> There a post in the list:
> 
> "The check works case sensitive. We use the operator
> eq and not a
> regular
> expression here. The check is in cmds/pkcs10_req.
> There is a function
> checkDNPolicy. Here you can find a line where we
> test ($baseElement eq
> $item). If you change this to ($item =~
> /$baseElement/i) then the problem
> is solved for you."
> 
> But this does not work for me.
> 
> Some can help me?
> 
> Thanks,
> -- 
>                                                     
>           
> ------------------------
> Jorge Isaac D�vila L�pez
> --
> 
> The wise man doesn't give the right answers, he
> poses the right questions.
> -- Claude Levi-Strauss
>         
> 
> 
> 
> 
>
-------------------------------------------------------
> This SF.Net email is sponsored by: NEC IT Guy Games.
>  How far can you shotput
> a projector? How fast can you ride your desk chair
> down the office luge track?
> If you want to score the big prize, get to know the
> little guy.
> Play to win an NEC 61" plasma display:
> http://www.necitguy.com/?r 
> _______________________________________________
> Openca-Users mailing list
> [email protected]
>
https://lists.sourceforge.net/lists/listinfo/openca-users
> 



                
______________________________________________ 
Renovamos el Correo Yahoo! 
Nuevos servicios, m�s seguridad 
http://correo.yahoo.es


-------------------------------------------------------
This SF.Net email is sponsored by: NEC IT Guy Games.  How far can you shotput
a projector? How fast can you ride your desk chair down the office luge track?
If you want to score the big prize, get to know the little guy.  
Play to win an NEC 61" plasma display: http://www.necitguy.com/?r=20
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to