On 10/16/2009 12:05 PM, Mike Mercier wrote:

Hello,

I have some questions someone can hopefully answer.

I would like to be able to create a user key pair using OpenSSL and then sign the public key with DogTag. I know you can create user keys with using a browser, but this is *not* what I am looking for.

1. Is this possible? 2. If possible, what template should be used for the request?

http://pki.fedoraproject.org/wiki/Apache_Cert_Enrollment this page describes how to do the same for "server certificates". What you do need to do is , something along these lines .. 1 - customize a profile like "caOtherCert" for example and add the right extensions you need. 2 - submit your pkcs10 request there and get it approved. --Chandra

Thanks, Mike

_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users