Hello Usman,

--On Mai 05, 2007 14:11:08 +0500 Usman Riaz <[EMAIL PROTECTED]> wrote:

I want to issue my customers certificate signed by my certificate
(a self-signed certificate). I want to limit the issued certificate to
not to act as a CA.
I would like to specify the cert chain
length in genrating my Root CA (little bit easier for me :), don't know
if it is possible) rather then when creating the customer certs.

The X509-V3 extension basicConstraints is you friend...

Bye

Goetz

--
DMCA: The greed of the few outweights the freedom of the many

Attachment: pgpcVKoYHOmue.pgp
Description: PGP signature

Reply via email to