Hi Ralf,

On 01/09/2006, at 9:45 PM, Ralf Hornik Mailings wrote:

> I have a lot of requests to sign by my CA. But I cannot submit them
> because the organisational name (O=) is different then the  
> organisational
> name by my CA.
>
> Can I disable this in an esay way, so that i can use this requests?

Edit the profile under openca/etc/servers/ra.conf and ca.conf

You want to modify the entries that look like this

DN_TYPE_SPKAC_BASE     "O" "C"
DN_TYPE_SPKAC_ELEMENTS "emailAddress" "CN" "OU"
DN_TYPE_SPKAC_NAME     "Basic User Request"
DN_TYPE_SPKAC_BASE_1 "@ca_organization@"
DN_TYPE_SPKAC_BASE_2 "@ca_country@"

As these are mandatory and fixed, whereas the other entries below are  
variable.  You will need to do this for each CSR type you want to be  
submitting outside the default required profiles.

HTH,

James Lever
Senior Systems Analyst
--
Strategic Technologies Group (STG)
Information Technology Services (ITS)
The University of Queensland
Brisbane  Queensland  4072

Ph: +61 7 336 57342
[EMAIL PROTECTED]





-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to