On 08/13/2011 04:20 PM, yyy wrote:
In that openssl.cnf file add section section [server]
Thanks, I've just figured it out :) it's strange that the default
openssl.cnf lacks a [server] section, shouldn't it be inserted by default?
In that openssl.cnf file add section section [server] (actually that name probably does not matter)and in it add a linensCertType=serverand when signing a request, add to command line -extensions server(at least that appears, what easyrsa script was doing)Easyrsa script also added a comment and
Hi,
I'm setting up an OpenVPN client-server using OpenSSL 1.0.0 for cert
generation.
How do I set the nsCertType attribute to server in the server cert? I
mean, without using automated scripts like easy-rsa.
This is what I'm doing:
openssl genrsa -out serverkey.pem 4096
cd ..
openssl req
