Hello Christian, i guess in the policy section of your CA you should - besides entries like
countryName = optional stateOrProvinceName = optional organizationName = optional organizationalUnitName = optional domainComponent = match commonName = supplied emailAddress = optional these and entry for your uid. I got a similar problem with the dc= (the domainComponent) which was not shown in the certificate subject. Kind regards Cornelius -------- Original-Nachricht -------- Datum: Thu, 25 Jan 2007 15:03:22 +0100 Von: Lutz Jaenicke <[EMAIL PROTECTED]> An: openssl-users@openssl.org Betreff: [EMAIL PROTECTED]: Help: Howto create certificates with uid in subject?] > Forwarding to openssl-users for public discussion. > > Best regards, > Lutz > ----- Forwarded message from Christian Brandes > <[EMAIL PROTECTED]> ----- > > X-Original-To: [EMAIL PROTECTED] > X-Original-To: [EMAIL PROTECTED] > Delivered-To: [EMAIL PROTECTED] > X-Greylist: delayed 253 seconds by postgrey-1.27 at master.openssl.org; > Thu, 25 Jan 2007 14:10:30 CET > DomainKey-Signature: s=s1024; d=forschungsgruppe.de; c=nofws; q=dns; > b=3HO3QuCY9gnE36mTl/7mmeF8agMFguGOGgiO/v15Vk35qRfvzLLYxYw5RkCdL6QkUmqxtioPPIU1SiFSETWG9ufH0lHLvysg7U30qMQTW32AEXhrnOQTO2aZUiBZpZCFGIeqP7gWnRKVeyi1JQKhs9xI/XYYqy+aeEtvjKv1GEw=; > Date: Thu, 25 Jan 2007 14:05:38 +0100 > From: Christian Brandes <[EMAIL PROTECTED]> > User-Agent: Thunderbird 1.5.0.9 (Windows/20061207) > To: [EMAIL PROTECTED] > Subject: Help: Howto create certificates with uid in subject? > X-Virus-Scanned: by amavisd 0.1 > X-Virus-Scanned: by amavisd 0.1 > > Hi, > > I am trying to issue certificates with a uid attribute in the subject > like: > > Subject: .../CN=<realname>/emailAddress=<emailaddress>/uid=<username> > > How can I do that? > > In the "DISTINGUISHED NAME AND ATTRIBUTE SECTION" of openssl.conf I > inserted: > > UID = UID (z.B.: mmustermann) > > Result is: > When generating a certificate request, I get asked for a UID. > When signing it to generate the certificate, the UID is shown. > But, when looking at the certificate in clear text the subject does not > contain the UID. > > What's wrong? > > Please give me a little help. > > Thanks > Christian > > -- > _____________________________________________ > Christian Brandes > FGW Telefonfeld GmbH > Abteilung IT und Technik > N7, 13-15; D-68161 Mannheim > > Tel.: +49-621-1233-117 > Fax : +49-621-1233-199 > email: [EMAIL PROTECTED] > http://www.forschungsgruppe.de > _____________________________________________ > > Wurzelzertifikat unter https://umfrage.forschungsgruppe.de/ca/ > > > > ----- End forwarded message ----- > > -- > Lutz Jaenicke [EMAIL PROTECTED] > http://www.aet.TU-Cottbus.DE/personen/jaenicke/ > BTU Cottbus, Allgemeine Elektrotechnik > Universitaetsplatz 3-4, D-03044 Cottbus > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] -- "Feel free" - 5 GB Mailbox, 50 FreeSMS/Monat ... Jetzt GMX ProMail testen: http://www.gmx.net/de/go/promail ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
