>One more thing: >As I understand it, you could use additional optional fields to be defined >in openssl.cnf: >G and S for _G_iven Name and _S_urname. > >In my opinion it is a good idea to create the CN automatically as a ³>serial-number² for >uniqueness of client certs and handle the user information via LDAP.
Hi thanks for help, our problem is that in Italian Public Adminitsration is mandatory the object Description in Certificates. It must be like this: Description="C=<surname>/N=<name>/D=<date's birth>[/R=<job role>] Example Description=C=Werzowa/N=Karl-Michael/D=01-01-1980 When we use only single character "/" or "=" it's OK Example description=C=Werzowa OK But when we use them together Example description=C=Werzowa/N=Karl-Micheal NOT OK and we obtain in the certificate description=C=Werzowa/, N=Karl-Micheal CALinux Staff. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]