Hi,

> I want to include the email (E) field in the subject field. I edited the 
> particular yaml file in /etc/openxpki/config.d/realm.tpl/profile to include 
> the Email as follows:
> 
> subject:
>             dn: CN=[% username %],E=[% username %]@xx.com,O=XXXC=XX
> 
> or 
> 
> subject:
>             dn: CN=[% username %],email=[% username %]@xx.com,O=XXXC=XX
> 
> When i submit the certificate request, it shows in request review that Email 
> is listed but when i approve the request and download the certificate, it 
> doesn't include the email. Please guide me,

Try "EMAILADDRESS=..." instead.

However, I cannot imagine why anyone would want an emailAddress RDN in a 
certificate DN - is deprecated according to RFC5280 section 4.1.2.6 and an 
email SAN is a much better alternative.

Cheers

Martin



_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to