Hi,

Miguel-san wrote:
>  This certificate request has the next fields:
>  
>  "CN=Name, OU=Department,O=Company, L=Valencia, S=Comunidad Valenciana"
>  
>  But i would like generate a request with the fields:
>  
>  "CN=Name, OU=Department,O=Company, L=Valencia, S=Comunidad Valenciana, SN=
11111111H"
>  
>  I have read the openssl documentation, and the sintaxis
>  of the openssl configuration file, but i can not find
>  the right way.

CHANGES file in openssl source distribution has following description:
(at least openssl-0.9.7g)

---- quotation begin ----
  *) Make object definitions compliant to LDAP (RFC2256): SN is the short
     form for "surname", serialNumber has no short form.
---- quotation end ----

So, if you aim "SN" as serialNumber (not surname),
how about to add serialNumber naming attribute to openssl.cnf file,
like:
--------------
[ policy_anything ]
countryName             = optional
        :
emailAddress            = optional
serialNumber            = optional                      (*)
        :
emailAddress                    = Email Address
emailAddress_max                = 64

serialNumber                    = Serial Number         (*)
--------------
(*) - added line

(I do not know surely *right* way...)
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to