OK, I have found where to dig. 

It is in $opencahome/etc/openssl/openssl.cnf  file.

The only one bothering thing remains - CRL extensions drop down box. It is a
potencional place for operator mistake. I mean than CA mostly defines CRL
profile in CPS and do not change it from day to day, so CRL generation must
be very strict - no misleading choices, only "next, next, enter PIN, done".

Regards,

Dmitrij



> -----Original Message-----
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf 
> Of Dmitrij Mironov
> Sent: Wednesday, November 15, 2006 11:57 AM
> To: 'Ideas, tips and discussions about OpenCA installation 
> and management.'
> Subject: [Openca-Users] CRL extensions
> 
> Hello guys,
> 
> I'm currently trying to find how to include 
> authorityKeyIdentifier in CRL extensions, but can't figure 
> out where I need to insert this. When I generate new CRL, I 
> need to select "CRL extensions" from the drop down box.
> It includes "none" or "defaults". How can I change this 
> "defaults" or add my own choice? 
> 
> Any ideas?
> 
> Thanks in advance.
> 
> Regards,
> 
> Dmitrij
> 
> 
> --------------------------------------------------------------
> -----------
> Take Surveys. Earn Cash. Influence the Future of IT Join 
> SourceForge.net's Techsay panel and you'll get the chance to 
> share your opinions on IT & business topics through brief 
> surveys - and earn cash 
> http://www.techsay.com/default.php?page=join.php&p=sourceforge
> &CID=DEVDEV
> _______________________________________________
> Openca-Users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openca-users
> 


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to