Hi,

I have modified /usr/local/etc/openca/openssl/extfiles/User.ext.template

and added the following to these two lines:

nsCertType = ..., objsign
extendedKeyUsage = ..., codeSigning

re-run configure_etc.sh and restart openca daemon, check if User.ext has
changed, otherwise remove it and re-run configure_etc.sh

user certificates created afterwards with this template allow code signing.

best regards,
Martin


From: Miguel Angel Robledo <marobledo@sa...> - 2013-11-06 15:24
>
> Hi,
>
>
> I need certificate for code signing, but don't know how to generate one
> with OpenCA with the default templates.
>
> Is possible create a new Template?
>
> Can any help me?
>
>
> Thanks.
>
> --
> Ing. Miguel Angel Robledo
> Infraestructura de Firma Digital
> Secretaría de Tecnologías para la Gestión
> Ministerio de Gobierno y Reforma del Estado
> Provincia de Santa Fe
> San Martín 2466 3° Piso (S3000FSB) Santa Fe
> +54 342 4508700/4574891 int 5132
>
>


------------------------------------------------------------------------------
November Webinars for C, C++, Fortran Developers
Accelerate application performance with scalable programming models. Explore
techniques for threading, error checking, porting, and tuning. Get the most 
from the latest Intel processors and coprocessors. See abstracts and register
http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to