On Fri, Nov 09, 2007, Ted Zeng wrote: > > Hi, > > I use Mac OS X 10.4.10 to create a certificate with two DRL distribution > points. I have been able to create certs with one distribution point. > > Here is how I set in the conf file: > > [ certificate_extensions ] > basicConstraints = CA:false > extendedKeyUsage =codeSigning > crlDistributionPoints=URI:http://server1/certs/air1.crl,URI:http://server2/c > erts/air1.crl > > > The certificate generated has only the first URI. > > What should I do to let a certificate have 2 DPs? >
Works fine with me with OpenSSL 0.9.8-stable on Windows. You don't have a line further down with crlDistributionPoints on as well do you? If you do OpenSSL will only see the last instance. Steve. -- Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage OpenSSL project core developer and freelance consultant. Funding needed! Details on homepage. Homepage: http://www.drh-consultancy.demon.co.uk ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
