> Hi there,
>
> I'm new to ssl. I'd like to know what to put in subject name of a certificate.
> Some documents mention that it's the DN. Does this DN correspond to entry
> in my LDAP DIT ? Can I have different DNs in LDAP and certificate?
It seems your question does not relate to just SSL protocol.
To answer it one should know what application you are trying to convince
to grant access or privilege level based on the fact user do know
a private key corresponding to certificate presented.
I believe most free software (available in src to be exact) can be tweaked
to follow any reasonable convention adopted in an organisation.
> I apologize for any faq.
This is unlikely a faq and I'd like to know "success stories" too about
certificate-based site-wide administration.
Vadim Fedukovich
______________________________________________________________________
Apache Interface to SSLeay (mod_ssl) www.engelschall.com/sw/mod_ssl/
Official Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]