>What commands
have you used on OpenSSL to sign the request? You need the CA certificate
extensions for obvious reasons.
I used openssl ca -sign and CA.pl -sign.
I thought that 0.9.7 would accept the
unknown x509 extensions? (as you can probably tell I am no openssl expert,
sorry just trying to fi
However what my original question was:
I
would like to create a subordinate Microsoft CA to my openssl CA. When
doing so in MS land you create a csr, I ship this off to openssl and sign
it, but when it comes back I get errors trying to import it as my CA. Has
anyone had experience doing
I am trying to create a situation where
either my Microsoft CA is root and openssl is subordinate or vice-versa.
Has anyone successfully done this. I have managed to sign a
subordinate csr from MS with open ssl but I can' figure out how to import
it back. Sorry if this is a duplicate post I hav