On Fri, Nov 21, 2003, Joseph Bruni wrote:

> 
> On a related note, how does this work for the other types of general 
> names (e.g. DNS, IP)? Looking through the v3_alt.c I don't see any code 
> that moves or copies DNS or IP values from the DN into alternative 
> names extensions. Do all these other general names types need to be 
> hard-coded in the config? (or at least hard-coded into the extensions 
> file?)
> 

There isn't actually a DNS or IP equivalent in the DN, well I suppose for SSL
server certificates the CN is used for DNS but that's about it.

These can be included either in the config file for 'ca' or in the certificate
request as an extension and then copied with 'ca'.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to