Thanks. I actually uses two config files. Once I update the other config file, the certificate has both Distribution Points.
Ted Zeng On 11/10/07 5:36 AM, "Dr. Stephen Henson" <[EMAIL PROTECTED]> wrote: > On Fri, Nov 09, 2007, Ted Zeng wrote: > >> >> Hi, >> >> I use Mac OS X 10.4.10 to create a certificate with two DRL distribution >> points. I have been able to create certs with one distribution point. >> >> Here is how I set in the conf file: >> >> [ certificate_extensions ] >> basicConstraints = CA:false >> extendedKeyUsage =codeSigning >> crlDistributionPoints=URI:http://server1/certs/air1.crl,URI:http://server2/c >> erts/air1.crl >> >> >> The certificate generated has only the first URI. >> >> What should I do to let a certificate have 2 DPs? >> > > Works fine with me with OpenSSL 0.9.8-stable on Windows. > > You don't have a line further down with crlDistributionPoints on as well do > you? If you do OpenSSL will only see the last instance. > > Steve. > -- > Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage > OpenSSL project core developer and freelance consultant. > Funding needed! Details on homepage. > Homepage: http://www.drh-consultancy.demon.co.uk > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
