[snip]

Below the relevant parts of my openssl.conf:
>
> x509_extensions         = usr_cert
>
> [ usr_cert ]
> basicConstraints        = critical, CA:FALSE
> keyUsage                = digitalSignature, keyEncipherment
> extendedKeyUsage        = serverAuth, clientAuth, emailProtection
> subjectKeyIdentifier    = hash
> subjectAltname          = <your custom class>
>

Err,

directive is called subjectAltNames ofcourse (getting late here ...)

kristof

-- 
You received this message because you are subscribed to the Google Groups 
"Puppet Users" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/puppet-users?hl=en.

Reply via email to