Dmitrij Mironov escribió:
> Hello guys,
>
> Can anybody give me a hint how to add PHONE field (OID 2.4.5.20) to
> the DN of certificates. Surely it is not static, It will arrive with CSR.
>
> Any ideas?
>
> Regards,
> Dmitrij
Hi Dmitrij,
Follow this instructions:
1. In the path "openca_path/etc/servers/pub.conf", add:
## ================== [ DN_TYPE ::= BASIC ] =====================
....
DN_TYPE_BASIC_ELEMENT_4 "Phone"
DN_TYPE_BASIC_ELEMENT_4_MINIMUM_LENGTH 8 //--> or length you need.
DN_TYPE_BASIC_ELEMENT_4_REQUIRED "YES"
DN_TYPE_BASIC_ELEMENT_4_CHARACTERSET "LATIN1_LETTERS"
.....
2. Modify the files (certification policy) located in the path
"openca_path/etc/openssl/openssl/*":
...
[new_oids ]
# We can add new OIDs in here for use by 'ca' and 'req'.
# Add a simple OID like this:
# testoid1=1.2.3.4
# Or use config file substitution like this:
# testoid2=${testoid1}.5.6
## used by ISIS-MTT
# pseudonym=2.5.4.65
# --------Dimitrij's Policy-------------**
Phone = 2.4.5.20
...
[ policy_match ]
...
Phone = optional
...
This work with CSR..."Server request"....
3. restart openca!!
I hope it be usefull...
--
Cordial saludo.
*Juan David Gutierrez Reyes*
Administrador del sistema
*CERTICAMARA S.A*
[EMAIL PROTECTED]
Av Calle 26 68D-35 Piso 5
Bogotá, Colombia
Visítenos en:
www.certicamara.com
Este es un mensaje de carácter confidencial de CERTICAMARA S.A. Si
usted no es el destinatario del mismo o no está autorizado para recibir
este mensaje en nombre del destinatario, absténgase de usar, copiar o
divulgar en cualquier otra forma esta información. Respecto de las
opiniones o información de tipo personal o no directamente relacionadas
con los asuntos de CERTICAMARA S.A que contenga este mensaje por error,
por favor comuníquese en forma inmediata con su remitente
-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
