On Fri, Jan 16, 2004, Charles Harmon wrote: > Hello all, > > I am desperately trying to get crlDistributionPoints stamped to my > (server/client) certificates. For some reason it does not get added to > any certificate I generate. I have read through the openssl.txt file > and it just says to add the following to the x509_extensions section: > > crlDistributionPoints = > URI:http://hostname.domain.com/mycrl.crl > > Well, no luck. I have been searching through the archives for this list > and basically it says the same thing. In a last ditch I went and bought > the O'Reilly openSSL book today which proved to be just as helpful. I > don't even see a reference to crlDistributionPoints in the book! As > this is my first attempt in setting up a CA I'm sure I am missing > something stupid. If anyone has a free moment to help me out it would > be greatly appreciated. I have included my openssl.cnf file for review. > Since this is my first attempt any advice or recommendations would be > useful. > [config file]
What command are you using to make the server/client certificates? What does: opensssl x509 -in some_cert.pem -text (where some_cert.pem is one you created) say? Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
