Re: Signing external certs with local CA

1999-06-29 Thread Holger Reif
Dmitry Morozovsky schrieb: Now i've starring at the very special problem: when user already have personal cert from one of master CA, it seems to be "Right Thing" to use this cert for authorization instead of making another local user certificate. As I understand, the best way to use it --

Re: Signing external certs with local CA

1999-06-29 Thread Pete Chown
Dmitry Morozovsky wrote: Now i've starring at the very special problem: when user already have personal cert from one of master CA, it seems to be "Right Thing" to use this cert for authorization instead of making another local user certificate. As I understand, the best way to use it --

Re: Signing external certs with local CA

1999-06-29 Thread Dmitry Morozovsky
On Tue, 29 Jun 1999, Holger Reif wrote: [skip] BTW why do you think it's wrong to issue completely new certs for your users that already have other certs? Don't you have more than one oficial id document like passport, drivers licence etc. Well, at least i prefer to minimize cases when

Re: Signing external certs with local CA

1999-06-29 Thread Holger Reif
Dmitry Morozovsky schrieb: On Tue, 29 Jun 1999, Holger Reif wrote: [skip] BTW why do you think it's wrong to issue completely new certs for your users that already have other certs? Don't you have more than one oficial id document like passport, drivers licence etc. Well, at

Signing external certs with local CA

1999-06-28 Thread Dmitry Morozovsky
Hello there, I've set up local CA for internal use within our company. (together with Apache/mod-ssl, surely) Now i've starring at the very special problem: when user already have personal cert from one of master CA, it seems to be "Right Thing" to use this cert for authorization instead of