Hi, I think you need to setup a RootCA which is dogtag (http://pki.fedoraproject.org/wiki/Installing_CA) and then try to setup another CA which is signed by the RootCA i.e SubCA(http://pki.fedoraproject.org/wiki/Installing_Subordinate_CA). Hope that helps!! Thanks Geetika On 01/22/2018 02:18 PM, anater dembelov wrote:
Good afternoon!
It's not that. I need the ability to support both the rootCA and the subCA on a single dogtag server. It is necessary to issue certificates signed by rootCA, and SubCA.
2018-01-22 8:50 GMT+03:00 Supper Florian 6342 sIT <Florian.Supper@s-itsolutions.at <mailto:Florian.Supper@s-itsolutions.at>>:
Hi,
http://pki.fedoraproject.org/wiki/PKI_Install_Guide <http://pki.fedoraproject.org/wiki/PKI_Install_Guide>
http://pki.fedoraproject.org/wiki/Quick_Start <http://pki.fedoraproject.org/wiki/Quick_Start>
http://pki.fedoraproject.org/wiki/Installing_CA <http://pki.fedoraproject.org/wiki/Installing_CA>
BR
-----Ursprüngliche Nachricht----- Von: pki-users-bounces@redhat.com <mailto:pki-users-bounces@redhat.com> [mailto:pki-users-bounces@redhat.com <mailto:pki-users-bounces@redhat.com>] Im Auftrag von anater dembelov Gesendet: Sonntag, 21. Jänner 2018 18:11 An: Endi Sukma Dewata; pki-users@redhat.com <mailto:pki-users@redhat.com> Betreff: [Pki-users] Issuing a subordinate CA certificate [phishing][bayes][heur][dkim][html-removed]
Hello!
Tell me please!
I need to release SubCA in the Dogtag. And then with this SubCA certificate sign the CSR. So I will have to get a chain of certificates. How can I do this in Dogtag?
Is there an instruction manual?
Best regards. Anatoly _______________________________________________ Pki-users mailing list Pki-users(at)redhat . com https : / / www . redhat . com / mailman / listinfo / pki-users
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users