On Sunday 27 May 2007 23:40, Marek Marcola wrote:

> When issuing certificate you will see certificate details
> with (or without :-) keyUsage information:
>
> $ openssl ca -config openssl.cnf -in req.pem

Thank you Marek!  

Using openssl ca with -verbose did all sort of checks and was quite 
informative.  I was not adding a Company Name (I though that it was not 
required) and that was clashing with the ca cert.  It seems that changing 
this to be the same with the ca cert made all the difference.  Now I have all 
the extensions I need.  :)

However, there's something else I noticed.  In index.txt I have an entry field 
that says "unknown":

V       080527095411Z           01      unknown /C=GB/ST=...

Do you know how this is can be edited/where is it being red from?
-- 
Regards,
Mick

Attachment: pgp3aXfIAfkBu.pgp
Description: PGP signature

Reply via email to