I'd like the PEM certs my CA creates to just start with ----BEGIN
CERTIFICATE---- and not contain the other stuff in the beginning (WebLogic
doesn't seem to like it).   Is there a CA option or config file entry to
achieve this?

Here's the stuff I want to avoid:
Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number: 100 (0x64)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=US, ST=District of Columbia, L=Washington, O=US
Government, OU=Department of the Treasury, OU=HR Connect, OU=CA, OU=all,
OU=3, CN=HRCPO Certificate Authority/[EMAIL PROTECTED]
        Validity
            Not Before: Sep 11 18:35:34 2006 GMT
            Not After : Sep 10 18:35:34 2009 GMT
        Subject: C=US, ST=District of Columbia, O=US Government,
OU=Department of the Treasury, OU=HR-Connect, OU=ALL, OU=ALL, OU=1,
CN=hrcsun41.hrconnect.treas.gov/[EMAIL PROTECTED]
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:9d:2d:65:96:c7:b5:29:9f:93:45:5c:65:47:cb:
                    8b:79:c5:ba:b1:29:ea:81:fd:d2:5b:cc:c2:4d:19:
                    04:f5:78:01:86:2d:20:c8:36:77:94:73:3c:98:52:
                    86:07:76:f5:b5:90:16:13:bf:d6:2a:6c:29:70:fa:
                    29:e6:95:68:1e:a8:21:0b:6d:e6:2e:2e:e4:8c:3a:
                    a1:2a:a7:de:e1:18:81:04:41:91:5c:75:6e:25:d3:
                    d3:f8:42:25:bd:52:f7:28:d0:c7:e7:25:85:11:63:
                    f1:12:6f:a4:31:db:ab:5c:c6:2e:a6:f9:62:63:a3:
                    24:0c:0b:f7:93:44:62:64:5f
                Exponent: 65537 (0x10001)
    Signature Algorithm: md5WithRSAEncryption
        ce:c4:53:be:53:0e:87:9c:c1:93:92:70:09:1f:3c:d9:4b:7b:
        51:1b:61:a6:ee:8d:6d:c1:11:c6:81:20:f0:e9:1a:7c:1b:95:
        e4:e8:a7:44:f4:bf:fd:02:11:ed:cf:28:08:de:18:d4:4d:d5:
        ed:22:37:89:94:e6:f5:33:21:7c:94:0d:27:f0:68:cf:ee:c7:
        b1:98:db:7a:37:95:7f:fe:1b:57:4c:e4:0d:9a:de:26:41:6b:
        f2:f5:8c:1d:f5:97:45:b7:13:fc:18:59:aa:97:d4:6b:7f:f5:
        e8:a6:9d:dc:da:1c:ad:44:b6:fb:c3:ac:94:24:36:6f:0f:55:
        21:10:97:21:f8:32:d3:43:f9:d0:59:3a:6c:4e:16:17:68:19:
        ec:1c:f1:88:4f:51:cc:64:8a:14:d0:58:99:ef:13:63:79:0f:
        7d:37:48:82:e2:c4:ae:a3:34:0f:b5:88:53:42:60:d7:c9:49:
        f3:38:28:06:b3:f5:3d:32:bc:f5:94:e5:52:9f:81:93:0e:76:
        1c:fc:5b:ed:b6:e8:30:c3:7b:fd:2c:64:8c:c9:9d:c8:a7:46:
        75:8b:5c:38:f3:d0:a4:98:f6:26:06:6f:2d:6c:83:e5:06:b7:
        43:ce:ae:64:40:b2:7e:c5:03:cf:09:d5:b7:be:51:e6:c2:6d:
        12:f7:a2:e3

Timothy M. Metzinger, CISSP, PMP
Northop Grumman Information Technologies/Nortel Government Solutions
Department of the Treasury
Office of the Chief Information Officer
HR Connect Program Office
202-622-0579(voice)
"HR Connect: Connecting people, performance, and technology"

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to