RE: Certificate extensions

2013-09-18 Thread Eisenacher, Patrick
Peter, > -Original Message- > From: Peter Sylvester > > On 09/18/2013 09:53 AM, Eisenacher, Patrick wrote: > >> -Please also note that adding extensions to a certificate request > usually doesn't make any sense, as those get added to the certificate solely > by the certificate issuer'

Re: Certificate extensions

2013-09-18 Thread Peter Sylvester
On 09/18/2013 09:53 AM, Eisenacher, Patrick wrote: -Please also note that adding extensions to a certificate request usually doesn't make any sense, as those get added to the certificate solely by the certificate issuer's grace. hi, I seem to disagree, well, "usually" saves you :-) Set

RE: Certificate extensions

2013-09-18 Thread Eisenacher, Patrick
> -Original Message- > From: radiatejava > > I have some doubts on how to use certificate extensions. I have this > openssl.cnf file: [snip] > Using this I want to generate a certificate for client > (extendedkeyusage=clientAuth) and one for server(extended key usage = > serverAuth). >

Re: Certificate Extensions

2000-04-13 Thread Dr Stephen Henson
Jorge wrote: > > Hello all, > I'm trying to include an URL to a CRL in my client certificates. My clients > use both netscape and explorer, so I can't use nsRevocationUrl. I've already > checked documentation, and found that the extension I must use is > CRLDistributionPoints (OID:2.5.29.31). > M