Paulius Bulotas wrote:
> 
> Hello,
> 
> when I create server certificate, install it into apache, when viewing
> certificate from IE, it shows every possible usage, but in my openssl.cnf is
> only keyUsage=nonRepudiation [for test purposes].
> What am I doing wrong and how to do it correctly ;)
> 

The usages IE displays are reflected in the extended key usage
extension, see doc/openssl.txt

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to