Hello,
I have been trying to figure out how to add the nsCertType=server extension
for certificates I am giving to my openvpn servers.
I have a [ req ] section of my openssl.cnf file, which I have some options
set in, and I also have a
[ server ] sections which has only one line: nsCertType = server
When I create the cert request, I do it with a command like this:
openssl req -new -subj /CN=Name/OU=Unit/O=Org -key server.key -out
server.csr -config C:\cert\openssl.conf -extensions server
However, this does not seem to be working, as I still get the VERIFY
nsCertType error.
What am I doing wrong here? Also, should I be able to skip the commandline
-extensions option if I just make the [ req ] section have the option
x509_extensions = server ?
Thanks in advance
------------------------------------------------------------------------------
Slashdot TV.
Video for Nerds. Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
