I've a client that also acts as a server to some other client. Therefore, I need to generate both client and server certs for this machine. Now when I specify the same DN for the second time, openssl, naturally, refuses to sign the request...What do I do? I can manage by changing some of the entities other than the common name (becoz that cannot be different). Is there a way other than specifying a different DN while generating client and server certs for the same machine? Thanx in advance Shobhit ------------------------------------------------------------------------------------- "This email message and files transmitted with it are confidential, proprietary and legally privileged. If the message that is received is an error, or if there is any mistransmission, the originator must be notified immediately as the unauthorized use, dissemination, publication, transfer or any other use of the message by unauthorized person is strictly forbidden by law and prohibited. If anybody commits violation then he would be legally liable and punishable under the relevant law. The intended recipient can be rest assured that the confidentiality and privilege is not waived or lost by any such mistransmission. Internet communications are not secure unless it is protected by using strong cryptography. TCS does not accept any responsibility whatsoever for changes in the nature of modifications, additions, deletions made to the message once it is sent. TCS reserves the right to monitor all e-mail communications through its network." ------------------------------------------------------------------------------------- Tata Consultancy Services www.tcs.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]