Re: issue same CN

2006-07-18 Thread snacktime
On 7/18/06, Dr. Stephen Henson <[EMAIL PROTECTED]> wrote: On Tue, Jul 18, 2006, Michael P. Soulier wrote: > Hello, > > If I'm using openssl to manage a CA, and I need to issue a new cert with > the same CN as a previously issued Cert, is it enough to revoke the > previous cert with that CN? > N

Re: issue same CN

2006-07-18 Thread Dr. Stephen Henson
On Tue, Jul 18, 2006, Michael P. Soulier wrote: > Hello, > > If I'm using openssl to manage a CA, and I need to issue a new cert with > the same CN as a previously issued Cert, is it enough to revoke the > previous cert with that CN? > Note that there is no problem issuing a certificate with th

Re: issue same CN

2006-07-18 Thread snacktime
On 7/18/06, Michael P. Soulier <[EMAIL PROTECTED]> wrote: Kyle Hamilton wrote: > You should be able to issue multiple certs to the same CN. One such > example would be an email-signing certificate, and a separate > code-signing certificate. Thanks for the quick answer. I've had problems doing

Re: issue same CN

2006-07-18 Thread Michael P. Soulier
Kyle Hamilton wrote: > Are you using CA.pl for it? (And what's the exact text of the error you > get?) No, I'm not. Let me reproduce it and capture it for you. Mike __ OpenSSL Project http://www.

Re: issue same CN

2006-07-18 Thread Kyle Hamilton
Are you using CA.pl for it? (And what's the exact text of the error you get?) -Kyle H On 7/18/06, Michael P. Soulier <[EMAIL PROTECTED]> wrote: Kyle Hamilton wrote: > You should be able to issue multiple certs to the same CN. One such > example would be an email-signing certificate, and a sep

Re: issue same CN

2006-07-18 Thread Michael P. Soulier
Kyle Hamilton wrote: > You should be able to issue multiple certs to the same CN. One such > example would be an email-signing certificate, and a separate > code-signing certificate. Thanks for the quick answer. I've had problems doing this. The openssl tool complains that there is already a cer

Re: issue same CN

2006-07-18 Thread Kyle Hamilton
You should be able to issue multiple certs to the same CN. One such example would be an email-signing certificate, and a separate code-signing certificate. Revocation of the prior one is optional, but is encouraged if the private key has been lost or compromised. -Kyle H On 7/18/06, Michael P.

issue same CN

2006-07-18 Thread Michael P. Soulier
Hello, If I'm using openssl to manage a CA, and I need to issue a new cert with the same CN as a previously issued Cert, is it enough to revoke the previous cert with that CN? Thanks, Mike -- Michael P. Soulier <[EMAIL PROTECTED]>, 613-592-2122 x2522 "Any intelligent fool can make things bigger