Julian Pawlowski (lists) wrote:
> Hello again,
>
> I'd like to know if I have to use a special template for the OCSP server
> certificate creation. I so, does somebody know the nessessary entries?
The only needed entry is the OCSPSigning in the extendedKeyUsage. So use that
in the profile of the OCSP server. This should work with Mozilla's family
(Mozilla/Firefox/Thunderbird) OCSP clients.
To set the extension just add the following line to the profile:
extendedKeyUsage = OCSPSigning
> Or can I use an included template, which one?
If there is no OCSP Server profile, just use one for a server and then add
the extendedKeyUsage. Check that everything else is correct, though!
Cheers,
--- Max.
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
