Hi, Thank you very much for your answer, so is no way to edit the filed of a csr not? But please could your explainme more detailed how can I bind the public key or just do your recomendation?
I really appreciate your help. Patrick Patterson-3 wrote: > > On September 11, 2010 10:58:44 am kummers wrote: >> Please, help me: >> >> >> How can I edit a CSR, i neew to chane the filds, for axample. edit the >> common name, I've been looking but have not found anything in the forum >> > You cannot edit a CSR - it is a signed structure - why don't you just re- > generate it with the correct values? > > Also - there is absolutely NOTHING that says that you have to keep the > information in a CSR when you generate the X.509 certificate - so if you > need > to change the Subject DN so that when you generate the Certificate get a > different value, just tell OpenSSL (or whatever CA software you are using) > to > do that. > > (of course, the caveat with the above is that you need a good way to bind > the > public key in the PKCS#10 or SPKAC structure with the subscriber named in > the > Subject of the X.509, but you weren't just trusting a self asserted value > in a > CSR to prove that, were you? :) > > Have fun! > > -- > Patrick Patterson > President and Chief PKI Architect, > Carillon Information Security Inc. > http://www.carillon.ca > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager majord...@openssl.org > > -- View this message in context: http://old.nabble.com/EDIT-FIELDS-ON-CSR-tp29673141p29775548.html Sent from the OpenSSL - User mailing list archive at Nabble.com. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
