Sorry to bother the list:
>
> > Why don't you try to add some validity rules
> > at the generation of the request?
>
> I am afraid I don't really understand this idea.
There is some software used by the user to generate the
request, so somehow the user adds a DN or whatever else
attribute, and
At 02:14 PM 9/5/00 +0200, you wrote:
>Hello,
>
>Suppose that a user generates a certificate request, but enrolls partially
>incorrect information in it (let's say (s)he filled the OU in other format
>than how I'd like it to be; for example "Dept. 870" instead of just "870").
Ivan,
I do not think
Thanks for e-mail, Peter,
> Why don't you try to add some validity rules
> at the generation of the request?
I am afraid I don't really understand this idea.
> Who is generating the request? A client, or do you
> generate keys and requests in a server?
As is the point of X.509, a person from