Hello Joseph, if I get this right, you want to use OpenXPKI as a Root CA? While this is technically possible we usually recommend to use a more lightweight tool such as "clca".
Yes your assumption is correct, OpenXPKI profiles have a similar function as MS CA templates. To create (or change) a profile you need to create/adjust the files in the profile/ directory. For a SubCA certificate you need to set the basic_constraints.ca key to a true value: https://github.com/openxpki/openxpki-config/blob/community/config.d/realm.tpl/profile/sample.yaml#L105 and add the appropriate keyusage flags, usually key_cert_sign and crl_sign. best regards Oliver Am 20.07.21 um 01:58 schrieb BLAS Joseph via OpenXPKI-users: > > Hello, I’m new to OpenXPKI and I’m migrating from MSCA. I was using > MSCA to sign CSRs for Subordinate CAs for which they have a “template” > which I believe is equivalent to an OpenXPKI “profile”. My question > is how can I configure a certificate profile so I can request a > Subordinate CA certificate in the OpenXPKI GUI? > > > > Thanks, > > > > Joseph > > > > _______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Protect your environment - close windows and adopt a penguin!
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
