On Mon, Aug 11, 2008 at 11:23 AM, Joseph Bester <[EMAIL PROTECTED]> wrote:
>
> On Aug 11, 2008, at 9:34 AM, I8abyte wrote:
>
>> Err ... rather ... I mean, what grid-proxy-init options are you using
>> to *set* the properties below?
>>
>
>
> From grid-proxy-init -help:
> -path-length <l> Allow a chain of at most l proxies to be
> generated from this one
>
>
> I'm quite curious to see the output of grid-cert-info for each of the
> proxies in your cert chain to see if any of them have the path length
> extension set.
>
> Joe
>
Yeah, I tried the "-path-length" option and it didn't set an extension
in my proxy or buy me anything otherwise. In any case my Root CA has
a pathlen of "3" ("CA:TRUE, pathlen:3"); my second-level CA who signed
my personal cert has a pathlen of "2" ("CA:TRUE, pathlen 2"), and my
personal doesn't set any "pathlen".
